CVE-2025-0736

5.5 mediumEPSS 0.2%

Medium (5.5). EPSS 0.2% chance of exploitation in the next 30 days.

A flaw was found in Infinispan, when using JGroups with JDBC_PING. This issue occurs when an application inadvertently exposes sensitive information, such as configuration details or credentials, through logging mechanisms. This exposure can lead to unauthorized access and exploitation by malicious actors.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 11% of CVEs (scores of 2026-10-31)
CWE: CWE-532
Published: 2025-01-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-269m-c36j-r834	Maven	org.infinispan:infinispan-parent	<=15.1.4.Final	no fix published

References

https://access.redhat.com/errata/RHSA-2025:2663
https://access.redhat.com/security/cve/CVE-2025-0736
https://bugzilla.redhat.com/show_bug.cgi?id=2342233

Check your stack JSON