Known vulnerabilities in infinispan

Vendor: openEuler
Software: infinispan
Software CPE: cpe:2.3:o:openeuler:infinispan:*:*:*:*:*:openeuler:*:*
Website: https://www.openeuler.org/
Total vulnerabilities: 7
Public exploits: 2
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting infinispan infinispan is affected by 7 known vulnerabilities: 1 critical, 2 high, 3 medium, 1 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU59098 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44832		 CWE-94 Medium
No
No
 8.2.4-11 28.12.2021 SB2021122816
SB2021123002
SB2022010601
and 197 more
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-45105		 CWE-835 Medium
Available
No
 8.2.4-10 18.12.2021 SB2021121802
SB2021121903
SB2021122011
and 170 more
#VU58976 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-45046		 CWE-94 High
Available
Exploited
 8.2.4-9, 8.2.4-10 15.12.2021 SB2021121504
SB2021121511
SB2021121512
and 179 more
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228		 CWE-94 Critical
Available
Exploited
 8.2.4-9, 8.2.4-10 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 339 more
#VU22830 - Deserialization of Untrusted Data
CVE-2016-0750		 CWE-502 Medium
No
No
 8.2.4-8 19.11.2019 SB2018091110
SB2021040769
SB2017111658
and 1 more
#VU22827 - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CVE-2019-10174		 CWE-470 Low
No
No
 8.2.4-13 19.11.2019 SB2019111902
SB2019111903
SB2020021334
and 4 more
#VU10576 - Deserialization of Untrusted Data
CVE-2017-15089		 CWE-502 High
No
No
 8.2.4-8 14.02.2018 SB2018021408
SB2018031234
SB2021040769
and 1 more