CVE-2024-56518: Improper Control of Generation of Code

Hazelcast Management Center through 6.0 allows remote code execution via a JndiLoginModule user.provider.url in a hazelcast-client XML document aka a client configuration file, which can be uploaded at the /cluster-connections URI...

io.cronapp:cronapp-framework-java (>=2.9.4-sp.15, <=3.2.1-sp.30), io.cronapp:cronapp-plugin-elastic (>=3.1.0, <=3.2.1-sp.30) +9 more potentially affected by CVE-2025-22228 via org.springframework.security:spring-security-crypto (3.1.4.release)

org.springframework.security:spring-security-crypto MAVEN version 3.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-crypto and may be impacted: - io.cronapp:cronapp-framework-java =2.9.4-sp.15,...

com.ahome-it:ahome-tooling-server-core (>=1.1.0-release, <=1.1.3-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.1.0-release, <=1.1.3-release) +3 more potentially affected by CVE-2025-22228 via org.springframework.security:spring-security-crypto (4.1.0.release)

org.springframework.security:spring-security-crypto MAVEN version 4.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-crypto and may be impacted: - com.ahome-it:ahome-tooling-server-core...

Atlassian Confluence 3.7.x < 7.19.22 / 7.20.x < 8.5.9 / 8.6.x < 8.9.0 / 9.2.0 (CONFSERVER-98713)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-98713 advisory. - In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2, some client...

WS-2022-0048

Security vulnerability found in com.hazelcast.jet:hazelcast-jet package from 4.1 before 4.5.3 and in com.hazelcast:hazelcast package from prior to 4.0.5 and from 4.1.1 before 4.1.8 , from 4.2 before 4.2.4 , from 5.0 before 5.0.2...

com.hazelcast:hazelcast Dependency in Bitbucket Data Center and Server

This High severity com.hazelcast:hazelcast Dependency vulnerability was introduced in versions 7.21.0, 8.3.0, 8.4.0, 8.5.0, 8.6.0, 8.7.0, 8.8.0, 8.9.0, 8.10.0, 8.11.0, 8.12.0, 8.13.0, 8.14.0-eap01, 8.15.0, 8.16.0, 8.17.0, and 8.18.0 of Bitbucket Data Center and Server. This com.hazelcast:hazelcas...

com.hazelcast:hazelcast Dependency in Confluence Data Center and Server

This High severity com.hazelcast:hazelcast Dependency vulnerability was introduced in versions 3.7 of Confluence Data Center and Server. This com.hazelcast:hazelcast Dependency vulnerability, with a CVSS Score of 7.6 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L allows an...

com.querydsl.contrib:querydsl-dynamodb (4.0.8), com.querydsl.contrib:querydsl-elasticsearch (4.0.8) +9 more potentially affected by CVE-2024-49203 via com.querydsl:querydsl-apt (4.0.8)

com.querydsl:querydsl-apt MAVEN version 4.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.querydsl:querydsl-apt and may be impacted: - com.querydsl.contrib:querydsl-dynamodb 4.0.8 - com.querydsl.contrib:querydsl-elasticsearch 4.0.8 -...

com.querydsl.contrib:querydsl-dynamodb (4.0.4), com.querydsl.contrib:querydsl-elasticsearch (4.0.4) +9 more potentially affected by CVE-2024-49203 via com.querydsl:querydsl-apt (4.0.4)

com.querydsl:querydsl-apt MAVEN version 4.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.querydsl:querydsl-apt and may be impacted: - com.querydsl.contrib:querydsl-dynamodb 4.0.4 - com.querydsl.contrib:querydsl-elasticsearch 4.0.4 -...

com.hazelcast.jet.examples:hazelcast-jet-examples-cdc (>=4.4, <=4.5.4), com.hazelcast.jet:hazelcast-jet-cdc-debezium (>=4.4, <=5.1.7) +19 more potentially affected by CVE-2023-1419 via io.debezium:debezium-core (1.2.5.final)

io.debezium:debezium-core MAVEN version 1.2.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.debezium:debezium-core and may be impacted: - com.hazelcast.jet.examples:hazelcast-jet-examples-cdc =4.4, =4.4, =4.4, =4.4, =4.4, =5.0-beta-1, =5.1.7...

com.hazelcast.jet.examples:hazelcast-jet-examples-cdc (>=4.3, <=4.3.1), com.hazelcast.jet:hazelcast-jet-cdc-debezium (>=4.3, <=4.3.1) +50 more potentially affected by CVE-2023-1419 via io.debezium:debezium-core (1.2.1.final)

io.debezium:debezium-core MAVEN version 1.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.debezium:debezium-core and may be impacted: - com.hazelcast.jet.examples:hazelcast-jet-examples-cdc =4.3, =4.3, =4.3, =4.3, =4.3, =4.3.1 -...

com.hazelcast.jet:hazelcast-jet-cdc-debezium (5.2-beta-1), com.hazelcast.jet:hazelcast-jet-cdc-mysql (5.2-beta-1) +27 more potentially affected by CVE-2023-1419 via io.debezium:debezium-core (1.9.3.final)

io.debezium:debezium-core MAVEN version 1.9.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.debezium:debezium-core and may be impacted: - com.hazelcast.jet:hazelcast-jet-cdc-debezium 5.2-beta-1 - com.hazelcast.jet:hazelcast-jet-cdc-mysql...

com.hazelcast.jet:hazelcast-jet-cdc-mysql (>=5.3.0-beta-1, <=5.3.8), com.hazelcast:hazelcast-distribution (5.3.0-beta-1) +10 more potentially affected by CVE-2023-1419 via io.debezium:debezium-connector-mysql (1.9.7.final)

io.debezium:debezium-connector-mysql MAVEN version 1.9.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.debezium:debezium-connector-mysql and may be impacted: - com.hazelcast.jet:hazelcast-jet-cdc-mysql =5.3.0-beta-1, =2.4.0, =0.1.0,...

com.hazelcast.jet:hazelcast-jet-cdc-mysql (5.2-beta-1), com.hazelcast:hazelcast-distribution (5.2-beta-1) +3 more potentially affected by CVE-2023-1419 via io.debezium:debezium-connector-mysql (1.9.3.final)

io.debezium:debezium-connector-mysql MAVEN version 1.9.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.debezium:debezium-connector-mysql and may be impacted: - com.hazelcast.jet:hazelcast-jet-cdc-mysql 5.2-beta-1 -...

com.hazelcast.jet:hazelcast-jet-cdc-debezium (>=5.2.0, <=5.2.5), com.hazelcast.jet:hazelcast-jet-cdc-mysql (>=5.2.0, <=5.2.5) +59 more potentially affected by CVE-2023-1419 via io.debezium:debezium-core (1.9.5.final)

io.debezium:debezium-core MAVEN version 1.9.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.debezium:debezium-core and may be impacted: - com.hazelcast.jet:hazelcast-jet-cdc-debezium =5.2.0, =5.2.0, =5.2.0, =5.2.0, =1.0.64, =1.0.75 -...

com.hazelcast.jet:hazelcast-jet-cdc-debezium (>=5.3.0-beta-1, <=5.3.8), com.hazelcast.jet:hazelcast-jet-cdc-mysql (>=5.3.0-beta-1, <=5.3.8) +55 more potentially affected by CVE-2023-1419 via io.debezium:debezium-core (1.9.7.final)

io.debezium:debezium-core MAVEN version 1.9.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.debezium:debezium-core and may be impacted: - com.hazelcast.jet:hazelcast-jet-cdc-debezium =5.3.0-beta-1, =5.3.0-beta-1, =5.3.0-beta-1, =1.0.80,...

Hazelcast data analysis platform Permission Bypass

The vulnerability of the Hazelcast data analysis platform is related to permission processing errors. Exploiting this vulnerability allows a remote attacker to perform arbitrary actions...

Atlassian Confluence 5.5 < 7.19.22 / 7.20.x < 8.5.9 / 8.6.x < 8.9.0 MPC (CONFSERVER-95839)

The version of Atlassian Confluence Server running on the remote host is affected by a missing permission check vulnerability as referenced in the CONFSERVER-95839 advisory. - In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through...

com.aerse:gcless (11.2), com.aerse:spring-security-taglib (1.1) +107 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (3.2.1.release)

org.springframework.security:spring-security-core MAVEN version 3.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.aerse:gcless 11.2 -...

How to remove a node from a cluster in on-premise Endpoint Management

This guide provides step-by-step instructions on how to remove a node from your on-premise Endpoint Management cluster. The process involves shutting down the node intended for decommission. The Endpoint Management system's Hazelcast service will then recognize the node as inactive and...