Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Report Cards
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0

Platform

My Vulnerabilities
Insights
Notifications
Account
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Book a demo

Get Started

Sign up
Log in

Legal

Privacy
Terms

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in

Home
Vendors
Redhat
Jboss Data Grid

redhat jboss data grid Vulnerabilities: CVEs, CISA KEV & Security Advisories

25 CVEs

1 in CISA KEV

redhat jboss data grid Vulnerabilities

CVE security advisories and vulnerability history for jboss data grid by redhat.

25

Total CVEs

Published

1

In CISA KEV

Exploited in the wild

2

Public exploits

With known exploit

6.5

Avg CVSS

2017–2023

Last updated December 18, 2023

Overview

redhat jboss data grid has 25 published CVE records since 2017, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 6.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting redhat jboss data grid, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of redhat jboss data grid's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High9

Medium10

Low0

6 additional CVEs have no CVSS severity score.

In CISA’s Known Exploited Vulnerabilities catalog

1

One of redhat jboss data grid's CVEs is confirmed exploited in the wild.

Public exploits

2

2 of redhat jboss data grid's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every redhat jboss data grid version named in a CVE, then pick one to see only the CVEs that affect it.

No specific affected versions are recorded for redhat jboss data grid; the CVEs below apply to the product without a version pin.

25 CVEs

Sort

Infinispan: credentials returned from configuration as clear text
CVE-2023-5384
Patch
Workaround
CWE-312
High · CVSS 7.2
EPSS 0.5% (68th pct)2023-12-18
Infinispan: circular reference on marshalling leads to dos
CVE-2023-5236
Patch
Medium · CVSS 4.4
EPSS 0.1% (27th pct)2023-12-18
Infinispan: non-admins should not be able to get cache config via rest api
CVE-2023-3629
Patch
CWE-304
Medium · CVSS 4.3
EPSS 0.1% (28th pct)2023-12-18
Infispan: rest bulk ops don't check permissions
CVE-2023-3628
Patch
CWE-304
Medium · CVSS 6.5
EPSS 0.1% (25th pct)2023-12-18
High vulnerability · 2023-10-10
CVE-2023-44487
CISA KEV
Public exploit
Patch
CWE-400
Added to CISA KEV 2023-10-10
High · CVSS 7.5
EPSS 94.4% (100th pct)2023-10-10
High vulnerability · 2022-08-31
CVE-2022-1271
Patch
CWE-179
High · CVSS 8.8
EPSS 0.8% (75th pct)2022-08-31
Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2
CVE-2021-4104
Patch
CWE-502
High · CVSS 7.5
EPSS 72.2% (99th pct)2021-12-14
Vulnerability · 2021-06-02
CVE-2020-14340
Patch
CWE-400
Unscored
EPSS 0.3% (56th pct)2021-06-02
Medium vulnerability · 2020-10-30
CVE-2020-25689
Patch
CWE-401
Medium · CVSS 5.3
EPSS 0.2% (47th pct)2020-10-30
Vulnerability · 2020-10-06
CVE-2020-25644
Patch
CWE-401
Unscored
EPSS 0.5% (65th pct)2020-10-06
Vulnerability · 2020-09-16
CVE-2020-1710
Unscored
EPSS 0.2% (48th pct)2020-09-16
Vulnerability · 2020-07-06
CVE-2019-14900
Patch
Unscored
EPSS 1.7% (83th pct)2020-07-06
High vulnerability · 2020-04-21
CVE-2020-1757
Patch
CWE-20
High · CVSS 8.1
EPSS 0.5% (65th pct)2020-04-21
High vulnerability · 2020-03-16
CVE-2019-14887CWE-757
High · CVSS 7.4
EPSS 0.2% (46th pct)2020-03-16
High vulnerability · 2020-03-02
CVE-2019-14892
Patch
CWE-502
High · CVSS 7.5
EPSS 0.9% (76th pct)2020-03-02
High vulnerability · 2020-01-23
CVE-2019-14888
Patch
CWE-400
High · CVSS 7.5
EPSS 0.2% (48th pct)2020-01-23
Medium vulnerability · 2020-01-02
CVE-2019-10158
Patch
CWE-384
Medium · CVSS 5.4
EPSS 0.5% (67th pct)2020-01-02
High vulnerability · 2019-11-25
CVE-2019-10174
Patch
CWE-470
High · CVSS 7.5
EPSS 0.9% (76th pct)2019-11-25
Medium vulnerability · 2019-11-08
CVE-2019-10219
Public exploit
Patch
CWE-79
Medium · CVSS 6.5
EPSS 1.7% (83th pct)2019-11-08
Medium vulnerability · 2019-10-02
CVE-2019-10212
Patch
CWE-532
Medium · CVSS 4.8
EPSS 0.4% (64th pct)2019-10-02
Medium vulnerability · 2019-07-25
CVE-2019-10184
Patch
CWE-862
Medium · CVSS 5.3
EPSS 1.5% (81th pct)2019-07-25
Medium vulnerability · 2019-06-12
CVE-2019-3888
Patch
CWE-532
Medium · CVSS 5.3
EPSS 0.6% (69th pct)2019-06-12
Medium vulnerability · 2018-07-16
CVE-2017-2638
Patch
CWE-306
Medium · CVSS 6.5
EPSS 0.5% (66th pct)2018-07-16
Vulnerability · 2018-05-15
CVE-2018-1131
Patch
CWE-349
Unscored
EPSS 0.5% (68th pct)2018-05-15
Vulnerability · 2017-04-13
CVE-2016-4970
Patch
Unscored
EPSS 8.2% (92th pct)2017-04-13

Common weakness types

The CWE weakness categories most often found in redhat jboss data grid CVEs. Follow any weakness for its full explanation.

CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-502Deserialization of Untrusted Data2 CVEs
CWE-532Insertion of Sensitive Information into Log File2 CVEs
CWE-401Missing Release of Memory after Effective Lifetime2 CVEs
CWE-304Missing Critical Step in Authentication2 CVEs
CWE-384Session Fixation1 CVE
CWE-470Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')1 CVE
CWE-757Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')1 CVE

Disclosure activity by year

How many redhat jboss data grid CVEs were published each year.

2017

1

2018

2

2019

5

2020

9

2021

2

2022

1

2023

5

Other redhat products

Browse vulnerabilities for other products by redhat.

enterprise linux2,124 CVEs enterprise linux desktop1,947 CVEs enterprise linux server1,914 CVEs enterprise linux workstation1,850 CVEs enterprise linux server aus1,062 CVEs enterprise linux eus787 CVEs enterprise linux server tus770 CVEs enterprise linux server eus625 CVEs

All redhat vulnerabilities

Frequently asked questions

Common questions about redhat jboss data grid vulnerabilities.

How many CVEs does redhat jboss data grid have?

redhat jboss data grid has 25 published CVE records since 2017.

How many redhat jboss data grid CVEs are in CISA KEV?

Yes — 1 of redhat jboss data grid's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for redhat jboss data grid vulnerabilities?

Yes — 2 of redhat jboss data grid's CVEs have a known public exploit.

What are the most common weakness types in redhat jboss data grid CVEs?

redhat jboss data grid's CVEs most often map to these CWE weakness types: CWE-400 (Uncontrolled Resource Consumption), CWE-502 (Deserialization of Untrusted Data), CWE-532 (Insertion of Sensitive Information into Log File), CWE-401 (Missing Release of Memory after Effective Lifetime).

What is the average severity of redhat jboss data grid CVEs?

The average CVSS base score across redhat jboss data grid's scored CVEs is 6.5.

References

All redhat vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track redhat jboss data grid vulnerabilities

Monitor new redhat jboss data grid vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References