pkg:Maven/org.infinispan:infinispan-core

All known vulnerabilities

• CRITICAL9.8CVE-2019-10158Improper implementation of the session fixation protection in Infinispan
  from 0, < 9.4.15.Final
• HIGH8.8CVE-2017-15089Deserialization of Untrusted Data in Infinispan
  from 0, < 9.2.0.CR1
• HIGH8.8CVE-2016-0750Infinispan: Deserialization of untrusted data in the Hot Rod Java client via automatic byte-array deserialization
  from 0, < 9.1.0.Final
• HIGH8.8Deserialization of Untrusted Data in Infinispan
• HIGH7.5Use of Externally-Controlled Input to Select Classes or Code in Infinispan
  from 0, < 8.2.12.Final
• MEDIUM6.5Improper Access Control in infinispan-server-runtime
  from 0, < 11.0.6.Final
• LOW2.7Infinispan caches credentials in clear text
  >= 15.0.0.Dev01, < 15.0.0.Dev07