Approved changes feed: RSS · Atom

cpe:2.3:a:[unknown]:infinispan:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor[Unknown] (5b07108a-8f0c-5d28-ab99-c4ff62adb460)
ProductInfinispan (fcbfeae9-14c3-5fa1-8ff7-c8a8b555dffb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-10174 vulnerable 2026-06-03 14:39:21.595409 Details available
HIGH (7.5)
A vulnerability was found in Infinispan such that the invokeAccessibly method from the public class ReflectionUtil allows any application class to invoke private methods in any class with Infinispan's privileges. The attacker can use reflection to introduce new, malicious behavior into the application.
Published: 2019-11-25T10:26:16.000Z
Updated: 2024-08-04T22:10:10.097Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-2638 vulnerable 2026-06-03 14:37:07.866754 Details available
MEDIUM (6.5)
It was found that the REST API in Infinispan before version 9.0.0 did not properly enforce auth constraints. An attacker could use this vulnerability to read or modify data in the default cache or a known cache name.
Published: 2018-07-16T13:00:00.000Z
Updated: 2024-08-05T14:02:06.903Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.