Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 82

Export CSV
CVE-2020-10771

infinispan-server-rest: Actions with effects should not be permitted via GET requests using REST API

A flaw was found in Infinispan version 10, where it is possible to perform various actions that could have side effects using GET requests. This flaw allows an attacker to perform a cross-site request forgery (CSRF) attack.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Infinispan Netapp Redhat
Products
Infinispan-server-rest Oncommand Insight Data Grid and 1 more
CVE-2019-14838

wildfly-core: Incorrect privileges for 'Monitor', 'Auditor' and 'Deployer' user by default

A flaw was found in wildfly-core before 7.2.5.GA. The Management users with Monitor, Auditor and Deployer Roles should not be allowed to modify the runtime state of the server

CVSS 3.1 · 4.9 Medium EPSS 1.1% KEV · Not listed
Vendors
Redhat
Products
Data Grid Enterprise Linux Jboss Data Grid and 7 more