Infinispan

4 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2024-6875< 15.0.6Infinispan: infinispan: rest compare api has buffer leakMEDIUM 6.50.5 %
CVE-2020-10771Red Hat Data Grid 8.2.0A flaw was found in Infinispan version 10, where it is possible to perform various actions that could have side effects using GET requests. HIGH 7.10.4 %
CVE-2020-25711Infinispan 11.0.6 FinalA flaw was found in infinispan 10 REST API, where authorization permissions are not checked while performing some server management operatioMEDIUM 6.51.1 %
CVE-2020-10746Infinispan 11.0.0A flaw was found in Infinispan (org.infinispan:infinispan-server-runtime) version 10, where it permits local access to controls via both RESMEDIUM 6.10.2 %