Infinispan Infinispan-server-rest — known CVE vulnerabilities

Every CVE whose affected-product data names Infinispan Infinispan-server-rest, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2021-31917 — CVSS 9.8 (critical): A flaw was found in Red Hat DataGrid 8.x (8.0.0, 8.0.1, 8.1.0 and 8.1.1) and Infinispan (10.0.0 through 12.0.0). An attacker could bypass…
• CVE-2020-10771 — CVSS 7.1 (high): A flaw was found in Infinispan version 10, where it is possible to perform various actions that could have side effects using GET requests…