Approved changes feed: RSS · Atom
cpe:2.3:a:hazelcast:hazelcast:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hazelcast (188878da-4b2c-52f5-8267-7bd4410c9d5a) |
|---|---|
| Product | Hazelcast (2c6b4c8a-ff2a-5e68-92d9-618440556d4f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:docker/hazelcast/hazelcast |
purl2cpe | 2026-06-01 10:11:14.559954 |
pkg:github/hazelcast/hazelcast |
purl2cpe | 2026-06-01 10:11:14.559956 |
pkg:maven/com.hazelcast/hazelcast |
purl2cpe | 2026-06-01 10:11:14.559958 |
pkg:sourceforge/hazelcast.mirror |
purl2cpe | 2026-06-01 10:11:14.559959 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-45860 |
vulnerable | 2026-06-08 06:12:43.470536 |
Details available
In Hazelcast Platform through 5.3.4, a security issue exists within the SQL mapping for the CSV File Source connector. This issue arises from inadequate permission checking, which could enable unauthorized clients to access data from files stored on a member's filesystem.
Published: 2024-02-16T00:00:00.000Z
Updated: 2024-11-06T16:20:00.171Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45859 |
vulnerable | 2026-06-08 06:12:43.470046 |
Details available
In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2, some client operations don't check permissions properly, allowing authenticated users to access data stored in the cluster.
Published: 2024-02-28T00:00:00.000Z
Updated: 2024-11-29T16:42:41.602Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-33264 |
vulnerable | 2026-06-08 06:06:22.151704 |
Details available
In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, configuration routines don't mask passwords in the member configuration properly. This allows Hazelcast Management Center users to view some of the secrets.
Published: 2023-05-22T00:00:00.000Z
Updated: 2025-01-21T15:20:07.435Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-10750 |
vulnerable | 2026-06-08 05:07:25.674777 |
Details available
In Hazelcast before 3.11, the cluster join procedure is vulnerable to remote code execution via Java deserialization. If an attacker can reach a listening Hazelcast instance with a crafted JoinRequest, and vulnerable classes exist in the classpath, the attacker can run arbitrary code.
Published: 2019-05-22T13:40:06.000Z
Updated: 2024-08-06T03:30:20.142Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.