Known vulnerabilities in JBoss Data Grid

Vendor: Red Hat Inc.
Software: JBoss Data Grid
Software CPE: cpe:2.3:a:red_hat:jboss_data_grid:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 103
Public exploits: 12
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting JBoss Data Grid JBoss Data Grid is affected by 103 known vulnerabilities: 2 critical, 30 high, 48 medium, 23 low Critical High Medium Low

Vulnerabilities (103)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128403 - Improper Encoding or Escaping of Output
CVE-2026-34481		 CWE-116 Medium
No
No
 8.6.1 28.04.2026 SB20260428217
SB20260513128
SB2026052731
and 1 more
#VU128402 - Improper Encoding or Escaping of Output
CVE-2026-34480		 CWE-116 Medium
No
No
 8.6.1 28.04.2026 SB20260428217
SB20260513128
SB2026052632
and 19 more
#VU128400 - Improper Output Neutralization for Logs
CVE-2026-34478		 CWE-117 Medium
No
No
 8.6.1 28.04.2026 SB20260428217
SB2026052632
SB2026052731
and 17 more
#VU128234 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2026-40975		 CWE-338 Medium
No
No
 8.6.1 27.04.2026 SB20260427182
SB2026052513
SB2026052929
and 3 more
#VU127603 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-42033		 CWE-1321 Medium
No
No
 8.6.1 24.04.2026 SB20260424169
SB2026061954
SB2026061992
and 11 more
#VU127598 - Uncontrolled Recursion
CVE-2026-42039		 CWE-674 Medium
No
No
 8.6.1 24.04.2026 SB20260424169
SB2026061954
SB2026062221
and 6 more
#VU127595 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-42041		 CWE-1321 Medium
No
No
 8.6.1 24.04.2026 SB20260424169
SB2026061954
SB2026062221
and 8 more
#VU127594 - Permissive List of Allowed Inputs
CVE-2026-42043		 CWE-183 Medium
No
No
 8.6.1 24.04.2026 SB20260424169
SB2026061954
SB2026061999
and 10 more
#VU126561 - Permissive List of Allowed Inputs
CVE-2026-41240		 CWE-183 Low
No
No
 8.6.1 20.04.2026 SB2026041630
SB2026042938
SB2026060221
and 9 more
#VU125803 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-4800		 CWE-94 High
No
No
 8.6.1 10.04.2026 SB2026041094
SB20260410101
SB20260410102
and 59 more
#VU124423 - Allocation of Resources Without Limits or Throttling
CVE-2026-33871		 CWE-770 Medium
No
No
 8.6.1 25.03.2026 SB2026032533
SB20260415180
SB20260422237
and 15 more
#VU124422 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-33870		 CWE-444 Medium
Available
No
 8.6.1 25.03.2026 SB2026032533
SB20260415180
SB2026042043
and 20 more
#VU121928 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-13465		 CWE-1321 Medium
No
No
 8.6.0 22.01.2026 SB2026012209
SB2026012701
SB2026012744
and 69 more
#VU114026 - Resource exhaustion
CVE-2025-55163		 CWE-400 Medium
No
No
 8.5.5 13.08.2025 SB2025081378
SB2025081948
SB2025081949
and 71 more
#VU112107 - Information Exposure Through an Error Message
CVE-2025-5731		 CWE-209 Low
No
No
 8.5.4 02.07.2025 SB2025070258
SB2025070265
#VU105974 - Information Exposure Through Log Files
CVE-2025-0736		 CWE-532 Low
No
No
 8.5.3 24.03.2025 SB2025032443
SB2025032446
#VU103770 - Improper input validation
CVE-2025-24970		 CWE-20 Medium
No
No
 8.5.3 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 88 more
#VU100095 - Memory corruption
CVE-2024-47072		 CWE-119 Medium
No
No
 8.5.2 07.11.2024 SB20241107102
SB20241115126
SB2024112531
and 36 more
#VU96642 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43788		 CWE-79 Low
No
No
 8.5.2 30.08.2024 SB2024083026
SB2024100824
SB2024100825
and 21 more
#VU90715 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-29180		 CWE-22 Medium
No
No
 8.5.0 03.06.2024 SB2024060314
SB2024060328
SB2024060410
and 18 more


Showing elements 1 - 20 out of 103