Security Resilience

CVE-2023-5236

Redhat Data Grid ≤ 8.4.4

Published
18 December 2023
Modified
25 September 2025
Patch / advisory
View advisory
CVSS Score v3.1 4.4
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.011 65th percentile
Risk Priority 38 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2023-5236 is a medium-severity an unspecified weakness vulnerability in Redhat Data Grid. Its CVSS base score is 4.4 (Medium).

Operationally, ranked in the top 35% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

A flaw was found in Infinispan, which does not detect circular object references when unmarshalling. An authenticated attacker with sufficient permissions could insert a maliciously constructed object into the cache and use it to cause out of memory errors and…

more

achieve a denial of service.

CWE(s)
NVD-CWE-Other

Related Threats

CVEs Like This One

CVE-2023-5384Same product: Infinispan Infinispan
CVE-2023-3629Same product: Infinispan Infinispan
CVE-2023-3628Same product: Infinispan Infinispan
CVE-2025-5731Same product: Infinispan Infinispan
CVE-2023-4586Same product: Redhat Data Grid
CVE-2025-23368Same product: Redhat Data Grid
CVE-2026-16093Same product: Redhat Data Grid
CVE-2026-16102Same product: Redhat Data Grid
CVE-2026-15573Same product: Redhat Data Grid
CVE-2026-15945Same product: Redhat Data Grid

Affected Assets

redhat
data grid
≤ 8.4.4
redhat
jboss data grid
all versions
infinispan
infinispan
all versions

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References