jgroups vulnerabilities

Products

• jgroup 1

Latest jgroups CVEs

Newest publication first

1. CVE-2013-4112 Exposure of Sensitive Information to an Unauthorized Actor in JGroup

   Published 2013-09-28

   Medium·CVSS 5.4 EPSS 1.6%

   The DiagnosticsHandler in JGroup 3.0.x, 3.1.x, 3.2.x before 3.2.9, and 3.3.x before 3.3.3 allows remote attackers to obtain sensitive information (diagnostic information) and execute arbitrary code by reusing valid credentials.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.