Vulnerabilities > Hazelcast > Hazelcast > 1.9.3.2

DATE CVE VULNERABILITY TITLE RISK
2023-05-22 CVE-2023-33264 Insufficiently Protected Credentials vulnerability in Hazelcast
In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, configuration routines don't mask passwords in the member configuration properly.
network
low complexity
hazelcast CWE-522
4.3
4.3
2019-05-22 CVE-2016-10750 Deserialization of Untrusted Data vulnerability in Hazelcast
In Hazelcast before 3.11, the cluster join procedure is vulnerable to remote code execution via Java deserialization.
network
hazelcast CWE-502
6.8
6.8