Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Ignite

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.5
    CVE-2025-48977

    Apache Ignite: REST HTTP arbitrary file read vulnerability

    Relative Path Traversal vulnerability in Apache Ignite REST API. Authenticated REST API users can read any file on the server with "cmd=log" command and a log path crafted in a certain way. This issue affects Apache Ignite: from 2.0.0 through 2.17.0. Users ar…

    Apache Software Foundation Apache Ignite org.apache.ignite:ignite-core Maven
  • High 7.5
    CVE-2017-7686

    Apache Ignite communicates to an external PHP server where sensitive information is sent

    Apache Ignite 1.0.0-RC3 to 2.0 uses an update notifier component to update the users about new project releases that include additional functionality, bug fixes and performance improvements. To do that the component communicates to an external PHP server (htt…

    Apache Software Foundation Apache Ignite org.apache.ignite:ignite-core Maven