Known vulnerabilities in Hazelcast
Vendor:
Hazelcast
Software:
Hazelcast
Software CPE:
cpe:2.3:a:hazelcast:hazelcast:*:*:*:*:*:*:*:*
Website:
https://hazelcast.org/
Total vulnerabilities:
4
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
5.7.0
2.5.0
2.4.3
2.4.2
2.4.0
5.6.0
2.3.0
2.2.9
2.2.8
2.2.7
2.2.6
2.2.5
2.2.4
2.2.3
2.2.2
2.2.1
2.2.0
2.1.0
5.5.0
5.3.8
5.4.0
5.3.7
5.2.5
2.0.0
5.3.6
5.3.5
5.3.2
5.0.5
5.1.7
5.2.4
5.3.1
4.2.8
5.3.0
5.1.6
5.2.3
5.2.2
4.2.7
1.7.2
4.2.6
5.0.4
5.1-BETA-1
4.1.10
5.1.5
5.2.1
5.2.0
5.1.4
3.12.13
5.1.3
4.5.1
4.5
4.4
4.3.1
4.3
4.2021.06
4.2021.04
4.2021.03
4.2021.02
4.2020.12
5.1.2
4.2.5
4.1.9
5.0.3
5.1.1
5.1
4.0.6
5.0.2
4.0.5
4.2.4
4.1.8
5.0.1
4.2.3
4.1.7
4.0.4
4.1.6
5.0
1.7.1
4.1.5
4.2.2
1.7.0
4.2.1
4.1.4
4.1.3
4.2
4.1.2
3.12.12
4.1.1
3.12.11
4.1
3.12.10
4.0.3
3.12.9
4.0.2
3.12.8
3.12.7
4.0.1
3.11.7
3.10.7
4.0
3.12.6
3.11.6
3.12.5
3.11.5
3.12.4
3.12.3
1.6.2
1.6.1
1.6.0
1.5.0
1.4.0
1.3.7
1.3.6
1.3.5
1.3.4
1.3.3
1.3.2
1.3.1
1.3.0
1.2.3
1.2.2
1.2.1
1.2.0
1.1.5
1.1.4
1.1.3
1.1.2
1.1.1
1.1.0
1.0.6
1.0.5
1.0.4
1.0.3
1.0.2
1.0.1
1.0.0
0.95
0.91
0.90
0.83
0.82
0.81
0.80
3.12.2
3.12.1
3.12
3.11.4
3.11.3
3.11.2
3.11.1
3.11
3.10.6
3.10.5
3.10.4
3.10.3
3.10.2
3.10.1
3.10
3.9.4
3.9.3
3.9.2
3.9.1
3.9
3.8.9
3.8.8
3.8.7
3.8.6
3.8.5
3.8.4
3.8.3
3.8.2
3.8.1
3.8
3.7.8
3.7.7
3.7.6
3.7.5
3.7.4
3.7.3
3.7.2
3.7.1
3.7
3.6.8
3.6.7
3.6.6
3.6.5
3.6.4
3.6.3
3.6.2
3.6.1
3.6
3.5.5
3.5.4
3.5.3
3.5.2
3.5.1
3.5
3.4.8
3.4.7
3.4.6
3.4.5
3.4.4
3.4.3
3.4.2
3.4.1
3.4
3.3.6
3.3.5
3.3.4
3.3.3
3.3.2
3.3.1
3.3
3.2.7
3.2.6
3.2.5
3.2.4
3.2.3
3.2.2
3.2.1
3.2
3.1.8
3.1.7
3.1.6
3.1.5
3.1.4
3.1.3
3.1.2
3.1.1
3.1
3.0.3
3.0.2
3.0.1
3.0
2.6.10
2.6.9
2.6.8
2.6.7
2.6.6
2.6.5
2.6.4
2.6.3
2.6.2
2.6.1
2.6
2.5.1
2.5
2.4.1
2.4
2.3.1
2.3
2.2
2.1.3
2.1.2
2.1.1
2.1
2.0.4
2.0.3
2.0.2
2.0.1
2.0
1.9.4.9
1.9.4.8
1.9.4.6
1.9.4.4
1.9.4.3
1.9.4.2
1.9.4.1
1.9.4
1.9.3.3
1.9.3.2
1.9.3
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU86859 - Improper Access Control CVE-2023-45859 |
CWE-284 | Medium | 5.2.5, 5.3.5 | 27.02.2024 |
SB2024022773 SB2024052426 SB2024121109 |
||
| #VU85882 - Improper Access Control CVE-2023-33265 |
CWE-284 | Medium | 5.0.5, 5.1.7, 5.2.4, 5.3.0 | 29.01.2024 |
SB2024012941 SB2024012942 |
||
| #VU71593 - Session Fixation CVE-2022-36437 |
CWE-384 | High | 3.12.13, 4.1.10, 4.2.6, 5.0.4, 5.1.3 | 27.01.2023 |
SB2023012717 SB2023012719 SB2023013117 and 1 more |
||
| #VU69493 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2022-0265 |
CWE-611 | Medium | 4.1.10, 5.1 BETA-1 | 22.11.2022 |
SB2022030326 SB2023013117 |