Jboss Data Grid

jboss_data_grid

Vendor: Redhat • 25 CVEs

CVEs (25)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-10184 2Netapp Redhat 6Active Iq Unified Manager Jboss Data GridJboss Enterprise Application Platform+3 more Jun 17, 2026 Jul 25, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 undertow before version 2.0.23.Final is vulnerable to an information leak issue. Web apps may have their directory structures predicted through requests without trailing slashes via the api.
CVE-2019-3888 2Netapp Redhat 6Active Iq Unified Manager Jboss Data GridOpenshift Application Runtimes+3 more Jun 17, 2026 Jun 12, 2019 N/A· v4 9.8 CRITICAL· v3 5.0 MEDIUM· v2 A vulnerability was found in Undertow web server before 2.0.21. An information exposure of plain text credentials through log files because Connectors.executeRootHandler:402 logs the HttpServerExchange object at ERROR le...Show more A vulnerability was found in Undertow web server before 2.0.21. An information exposure of plain text credentials through log files because Connectors.executeRootHandler:402 logs the HttpServerExchange object at ERROR level using UndertowLogger.REQUEST_LOGGER.undertowRequestFailed(t, exchange)Show less
CVE-2017-2638 2Infinispan Redhat 2Infinispan Jboss Data Grid Nov 21, 2024 Jul 16, 2018 N/A· v4 6.5 MEDIUM· v3 6.4 MEDIUM· v2 It was found that the REST API in Infinispan before version 9.0.0 did not properly enforce auth constraints. An attacker could use this vulnerability to read or modify data in the default cache or a known cache name.
CVE-2018-1131 2Infinispan Redhat 2Infinispan Jboss Data Grid Nov 21, 2024 May 15, 2018 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Infinispan permits improper deserialization of trusted data via XML and JSON transcoders under certain server configurations. A user with authenticated access to the server could send a malicious object to a cache config...Show more Infinispan permits improper deserialization of trusted data via XML and JSON transcoders under certain server configurations. A user with authenticated access to the server could send a malicious object to a cache configured to accept certain types of objects, achieving code execution and possible further attacks. Versions 9.0.3.Final, 9.1.7.Final, 8.2.10.Final, 9.2.2.Final, 9.3.0.Alpha1 are believed to be affected.Show less
CVE-2016-4970 3Apache NettyRedhat 4Cassandra Jboss Data GridJboss Middleware Text Only Advisories+1 more May 13, 2026 Apr 13, 2017 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 handler/ssl/OpenSslEngine.java in Netty 4.0.x before 4.0.37.Final and 4.1.x before 4.1.1.Final allows remote attackers to cause a denial of service (infinite loop).

Previous 12