Red Hat Infinispan vulnerabilities
3 vulnerabilities
Known vulnerabilities in Red Hat Infinispan, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2016-0750infinispaninfinispan+2
EPSS score2.42%
The hotrod java client in infinispan before 9.1.0.Final automatically deserializes bytearray message contents in certain events. A malicious user could exploit this flaw by injecting a specially-crafted serialized object to attain remote code execution or conduct other attacks.CVE-2025-5731chainguardinfinispan-15.0+14EPSS score0.17%
A flaw was found in Infinispan CLI. A sensitive password, decoded from a Base64-encoded Kubernetes secret, is processed in plaintext and included in a command string that may expose the data in an error message when a command is not found.CVE-2019-10158infinispaninfinispan+3EPSS score1.96%
A flaw was found in Infinispan through version 9.4.14.Final. An improper implementation of the session fixation protection in the Spring Session integration can result in incorrect session handling.