WaratekVRT Sign in

Redhat Jboss Data Grid CVEs

20 CVEs, 2 exploited, 5 protected by Waratek

Reset
More filters (2)
Columns
Vendor redhat✕Product jboss data grid✕
Overview 20 matches · 5 protected · 2 exploited · 1 CISA KEV · 2 public PoC · 2 EPSS ≥ 0.5
20matches 5protected25.0% 2exploited10.0% 1CISA KEV5.0% 2public PoC10.0% 2EPSS ≥ 0.510.0%
Protected by Waratek 5 25.0% Rule in development 0 0.0% Mitigation candidate 1 5.0% No exploit published 14 70.0%
Critical 2 10.0% High 9 45.0% Medium 9 45.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 5 25.0% partly blocked 0 0.0% not blocked 15 75.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 2 10.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 18 90.0%
split by peak 7 / year
No exploit published: 14Mitigation candidate: 1Protected by Waratek: 5 Medium: 9High: 9Critical: 2 not blocked: 15blocked by ARMR today: 5 No public exploit: 18Exploited: 2
20171 No exploit published1 High1 not blocked1 No public exploit1 20182 Protected by Waratek1 No exploit published1 High1 Medium1 blocked by ARMR today1 not blocked1 No public exploit2 20193 Protected by Waratek2 No exploit published1 High2 Medium1 blocked by ARMR today2 not blocked1 No public exploit3 20207 Protected by Waratek1 No exploit published6 Critical2 High2 Medium3 blocked by ARMR today1 not blocked6 No public exploit7 20212 Protected by Waratek1 No exploit published1 High1 Medium1 blocked by ARMR today1 not blocked1 Exploited1 No public exploit1 20220 20235 Mitigation candidate1 No exploit published4 High2 Medium3 not blocked5 Exploited1 No public exploit4
2017201820192020202120222023
20 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2023-5384 High 2023-12-18 No exploit published No public exploit A flaw was found in Infinispan. When serializing the configuration for a cache to XML/JSON/YAML, which contains credentials (JDBC store with connection pooling, remote store), the credentials are returned in clear text as part of the configuration.
CVE-2023-5236 Medium 2023-12-18 No exploit published No public exploit A flaw was found in Infinispan, which does not detect circular object references when unmarshalling. An authenticated attacker with sufficient permissions could insert a maliciously constructed object into the cache and use it to cause out of memory errors and achieve a denial of service.
CVE-2023-3629 Medium 2023-12-18 No exploit published No public exploit A flaw was found in Infinispan's REST, Cache retrieval endpoints do not properly evaluate the necessary admin permissions for the operation. This issue could allow an authenticated user to access information outside of their intended permissions.
CVE-2023-3628 Medium 2023-12-18 No exploit published No public exploit A flaw was found in Infinispan's REST. Bulk read endpoints do not properly evaluate user permissions for the operation. This issue could allow an authenticated user to access information outside of their intended permissions.
CVE-2023-44487 High 2023-10-10 Mitigation candidate Exploited The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-4104 High 2021-12-14 Protected by Waratek Exploited JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingName and TopicConnectionFactoryBindingName configurations causing JMSAppender to perform JNDI requests that result in remote code execution in a similar fashion to CVE-2021-44228. Note this issue only affects Log4j 1.2 when specifically configured to use JMSAppender, which is not the default. Apache Log4j 1.2 reached end of life in August 2015. Users should upgrade to Log4j 2 as it addresses numerous other issues from the previous versions.
CVE-2020-14340 Medium 2021-06-02 No exploit published No public exploit A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 through 3.8.1.Final.
CVE-2020-25689 Medium 2020-11-02 No exploit published No public exploit A memory leak flaw was found in WildFly in all versions up to 21.0.0.Final, where host-controller tries to reconnect in a loop, generating new connections which are not properly closed while not able to connect to domain-controller. This flaw allows an attacker to cause an Out of memory (OOM) issue, leading to a denial of service. The highest threat from this vulnerability is to system availability.
CVE-2020-1710 Medium 2020-09-16 No exploit published No public exploit The issue appears to be that JBoss EAP 6.4.21 does not parse the field-name in accordance to RFC7230[1] as it returns a 200 instead of a 400.
CVE-2019-14900 Medium 2020-07-06 Protected by Waratek No public exploit A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks.
CVE-2020-1757 High 2020-04-21 No exploit published No public exploit A flaw was found in all undertow-2.x.x SP1 versions prior to undertow-2.0.30.SP1, all undertow-1.x.x and undertow-2.x.x versions prior to undertow-2.1.0.Final, where the Servlet container causes servletPath to normalize incorrectly by truncating the path after semicolon which may lead to an application mapping resulting in the security bypass.
CVE-2019-14892 Critical 2020-03-02 No exploit published No public exploit A flaw was discovered in jackson-databind in versions before 2.9.10, 2.8.11.5 and 2.6.7.3, where it would permit polymorphic deserialization of a malicious object using commons-configuration 1 and 2 JNDI classes. An attacker could use this flaw to execute arbitrary code.
CVE-2019-14888 High 2020-01-23 No exploit published No public exploit A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service (DOS) to make the service unavailable on SSL.
CVE-2019-10158 Critical 2020-01-02 No exploit published No public exploit A flaw was found in Infinispan through version 9.4.14.Final. An improper implementation of the session fixation protection in the Spring Session integration can result in incorrect session handling.
CVE-2019-10174 High 2019-11-25 Protected by Waratek No public exploit A vulnerability was found in Infinispan such that the invokeAccessibly method from the public class ReflectionUtil allows any application class to invoke private methods in any class with Infinispan's privileges. The attacker can use reflection to introduce new, malicious behavior into the application.
CVE-2019-10219 Medium 2019-11-08 Protected by Waratek No public exploit A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.
CVE-2019-10184 High 2019-07-25 No exploit published No public exploit undertow before version 2.0.23.Final is vulnerable to an information leak issue. Web apps may have their directory structures predicted through requests without trailing slashes via the api.
CVE-2017-2638 Medium 2018-07-16 No exploit published No public exploit It was found that the REST API in Infinispan before version 9.0.0 did not properly enforce auth constraints. An attacker could use this vulnerability to read or modify data in the default cache or a known cache name.
CVE-2018-1131 High 2018-05-15 Protected by Waratek No public exploit Infinispan permits improper deserialization of trusted data via XML and JSON transcoders under certain server configurations. A user with authenticated access to the server could send a malicious object to a cache configured to accept certain types of objects, achieving code execution and possible further attacks. Versions 9.0.3.Final, 9.1.7.Final, 8.2.10.Final, 9.2.2.Final, 9.3.0.Alpha1 are believed to be affected.
CVE-2016-4970 High 2017-04-13 No exploit published No public exploit handler/ssl/OpenSslEngine.java in Netty 4.0.x before 4.0.37.Final and 4.1.x before 4.1.1.Final allows remote attackers to cause a denial of service (infinite loop).