Skip to content
OpenAdvisories

Vendor

Infinispan

1 known vulnerabilities.

Products

infinispan 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2017-15089

    Deserialization of Untrusted Data in Infinispan

    It was found that the Hotrod client in Infinispan before 9.2.0.CR1 would unsafely read deserialized data on information from the cache. An authenticated attacker could inject a malicious object into the data cache and attain deserialization on the client, and…

    Infinispan infinispan org.infinispan:infinispan-core Maven