Ignite vulnerabilities

2 known vulnerabilities in Ignite from Apache. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.0 Critical severity

  Apache Ignite: Deserialization of Untrusted Data

  CVE-2024-52577Feb 14, 2025ApacheEPSS 3.13%

  In Apache Ignite versions from 2.6.0 and before 2.17.0, configured Class Serialization Filters are ignored for some Ignite endpoints. The vulnerability could be exploited if an attacker manually crafts an Ignite message containing a vulnerable object whose cla

• 9.8 Critical severity

  VMware Tanzu Spring Data Commons Property Binder Exploited

  CVE-2018-1273Apr 11, 2018Spring by PivotalEPSS 97%

  Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user (or attacker) can supp