Moderate severity vulnerability that affects org.apache.ignite:ignite-core

Description

References

• nvd.nist.gov/vuln/detail/CVE-2016-6805 · ADVISORY
• GitHub Advisory GHSA-8qfc-cvjp-mgpq · ADVISORY
• seclists.org/oss-sec/2017/q2/31 · WEB
• securityfocus.com/bid/97509 · WEB

More vulnerabilities in org.apache.ignite:ignite-core

• CVE-2025-48977MEDIUM 6.5Relative Path Traversal vulnerability in Apache Ignite REST API. Authenticated REST API users can read any file on the server with "cmd=log…
• CVE-2024-52577CRITICAL 9.0In Apache Ignite versions from 2.6.0 and before 2.17.0, configured Class Serialization Filters are ignored for some Ignite endpoints. The vu…
• CVE-2020-1963CRITICAL 9.1Apache Ignite uses H2 database to build SQL distributed execution engine. H2 provides SQL functions which could be used by attacker to acces…
• CVE-2018-8018CRITICAL 9.8In Apache Ignite before 2.4.8 and 2.5.x before 2.5.3, the serialization mechanism does not have a list of classes allowed for serialization/…
• CVE-2018-1295CRITICAL 9.8In Apache Ignite 2.3 or earlier, the serialization mechanism does not have a list of classes allowed for serialization/deserialization, whic…