Red Hat infinispan
3 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-5731 | < 15.2.5 | Infinispan: credential leakage in infinispan cli | MEDIUM 5.5 | 0.2 % | ||
| CVE-2019-10158 | n/a | A flaw was found in Infinispan through version 9.4.14.Final. An improper implementation of the session fixation protection in the Spring Ses | CRITICAL 9.8 | 2.0 % | ||
| CVE-2016-0750 | 9.1.0.Final | The hotrod java client in infinispan before 9.1.0.Final automatically deserializes bytearray message contents in certain events. A malicious | HIGH 8.8 | 2.4 % |