Login Request a demo
IN
Product
Infinispan
by Infinispan · last CVE Jun 26, 2025
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities12In the news0Timeline
Severity mix
Critical 1High 4Medium 6Low 1
Severity
All severities12Critical1High4Medium6Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Infinispan to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-10174
8.8
3%
Nov 25
A vulnerability was found in Infinispan such that the invokeAccessibly method from the public class ReflectionUtil allows any application class to invoke private methods in any…
Affected: before 8.2.12; 9.0.0 before 9.4.17
CVE-2016-0750
8.8
2%
Sep 11
The hotrod java client in infinispan before 9.1.0.Final automatically deserializes bytearray message contents in certain events
Affected: before 9.1.0
CVE-2018-1131
8.8
1%
May 15
Infinispan permits improper deserialization of trusted data via XML and JSON transcoders under certain server configurations
Affected: 8.2.10; 9.0.3; 9.1.7; 9.2.2; 9.3.0
CVE-2017-15089
8.8
3%
Feb 15
It was found that the Hotrod client in Infinispan before 9.2.0.CR1 would unsafely read deserialized data on information from the cache
Affected: through 9.1.6; 9.2.0; 9.2.0; 9.2.0; 9.2.0; 9.2.0
Showing 4