Red Hat Jboss Data Grid Text-only Edition
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:jboss_data_grid:-:*:*:*:text-only:*:*:*
part: a version: - update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Jboss Data Grid (80ee587d-357e-52bc-bf07-c57999e5d4f7) |
| Edition | * |
| Language | * |
| Software edition | text-only |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-5384 |
vulnerable | 2026-06-08 06:19:43.492829 |
Infinispan: credentials returned from configuration as clear text
HIGH (7.2)
A flaw was found in Infinispan. When serializing the configuration for a cache to XML/JSON/YAML, which contains credentials (JDBC store with connection pooling, remote store), the credentials are returned in clear text as part of the configuration.
Published: 2023-12-18T13:43:08.728Z
Updated: 2025-11-20T07:07:36.736Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5236 |
vulnerable | 2026-06-08 06:19:42.954137 |
Infinispan: circular reference on marshalling leads to dos
MEDIUM (4.4)
A flaw was found in Infinispan, which does not detect circular object references when unmarshalling. An authenticated attacker with sufficient permissions could insert a maliciously constructed object into the cache and use it to cause out of memory errors and achieve a denial of service.
Published: 2023-12-18T13:43:08.445Z
Updated: 2025-11-21T05:57:06.838Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3629 |
vulnerable | 2026-06-08 06:09:40.040525 |
Infinispan: non-admins should not be able to get cache config via rest api
MEDIUM (4.3)
A flaw was found in Infinispan's REST, Cache retrieval endpoints do not properly evaluate the necessary admin permissions for the operation. This issue could allow an authenticated user to access information outside of their intended permissions.
Published: 2023-12-18T13:43:07.770Z
Updated: 2025-11-07T10:41:28.830Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3628 |
vulnerable | 2026-06-08 06:09:40.037432 |
Infispan: rest bulk ops don't check permissions
MEDIUM (6.5)
A flaw was found in Infinispan's REST. Bulk read endpoints do not properly evaluate user permissions for the operation. This issue could allow an authenticated user to access information outside of their intended permissions.
Published: 2023-12-18T13:43:07.750Z
Updated: 2025-11-07T10:41:24.777Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1710 |
vulnerable | 2026-06-08 05:21:02.847120 |
Details available
The issue appears to be that JBoss EAP 6.4.21 does not parse the field-name in accordance to RFC7230[1] as it returns a 200 instead of a 400.
Published: 2020-09-16T14:28:20.000Z
Updated: 2024-08-04T06:46:30.214Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3888 |
vulnerable | 2026-06-08 05:13:56.309943 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14892 |
vulnerable | 2026-06-08 05:12:56.363397 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14888 |
vulnerable | 2026-06-08 05:12:56.349850 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10219 |
vulnerable | 2026-06-08 05:12:22.557079 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10212 |
vulnerable | 2026-06-08 05:12:22.525764 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10184 |
vulnerable | 2026-06-08 05:12:22.456534 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10174 |
vulnerable | 2026-06-08 05:12:22.424578 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.