Browse CVEs

CRITICAL 9.8 CVE-2024-56518 Hazelcast Management Center through 6.0 allows remote code execution via a JndiLoginModule user.provider.url in a hazelcast-client XML document (aka … Management Center after 6.0 Fix from $2,3002025-04-17 HIGH 7.6 CVE-2023-45859 In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2, some client operation… Hazelcast 5.2.5 / 5.3.5+ Fix from $1,9502024-02-28 MEDIUM 6.5 CVE-2023-45860 In Hazelcast Platform through 5.3.4, a security issue exists within the SQL mapping for the CSV File Source connector. This issue arises from inadequ… Hazelcast 5.2.5 / 5.3.5+ Fix from $1,6002024-02-16 HIGH 8.8 CVE-2023-33265 In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, executor services don't check client permissions properly, allowing authenticat… Hazelcast 5.0.5 / 5.1.7+ Fix from $1,9502023-07-18 CRITICAL 9.1 CVE-2022-36437 The Connection handler in Hazelcast and Hazelcast Jet allows a remote unauthenticated attacker to access and manipulate data in the cluster with the … Hazelcast 3.12.13 / 4.1.10+ Fix from $2,3002022-12-29 CRITICAL 9.8 CVE-2022-0265 Improper Restriction of XML External Entity Reference in GitHub repository hazelcast/hazelcast in 5.1-BETA-1. Hazelcast Patch available Fix from $2,3002022-03-03 CRITICAL 9.8 CVE-2020-26168 The LDAP authentication method in LdapLoginModule in Hazelcast IMDG Enterprise 4.x before 4.0.3, and Jet Enterprise 4.x through 4.2, doesn't verify p… Hazelcast 4.0.3+ Fix from $2,3002020-11-09 HIGH 8.1 CVE-2016-10750 In Hazelcast before 3.11, the cluster join procedure is vulnerable to remote code execution via Java deserialization. If an attacker can reach a list… Hazelcast 3.11+ Fix from $1,9502019-05-22