Known vulnerabilities in Infinispan

Software: Infinispan
Software CPE: cpe:2.3:a:red_hat:infinispan:*:*:*:*:*:*:*:*
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Infinispan Infinispan is affected by 7 known vulnerabilities: 2 medium, 5 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112107 - Information Exposure Through an Error Message
CVE-2025-5731
CWE-209 Low
No
No
15.0.16 02.07.2025 SB2025070258
SB2025070265
#VU105974 - Information Exposure Through Log Files
CVE-2025-0736
CWE-532 Low
No
No
14.0.34, 15.0.13, 15.1.5 24.03.2025 SB2025032443
SB2025032446
#VU23379 - Session Fixation
CVE-2019-10158
CWE-384 Low
No
No
9.4.15 04.12.2019 SB2019061818
SB2019120401
#VU22830 - Deserialization of Untrusted Data
CVE-2016-0750
CWE-502 Medium
No
No
9.1.0 19.11.2019 SB2018091110
SB2021040769
SB2017111658
and 1 more
#VU22829 - Improper Authentication
CVE-2017-2638
CWE-287 Medium
No
No
9.0.0 19.11.2019 SB2018071613
#VU22828 - Deserialization of Untrusted Data
CVE-2018-1131
CWE-502 Low
No
No
9.3.0 19.11.2019 SB2018051525
SB2019112016
#VU22827 - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CVE-2019-10174
CWE-470 Low
No
No
10.0.0 19.11.2019 SB2019111902
SB2019111903
SB2020021334
and 4 more