DE
Product
Derby
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 1Medium 1Low 0
Watch
Add Derby to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-46337 | 9.8 | Nov 20 | A cleverly devised username might bypass LDAP authentication checks Affected: 10.1.1.0 before 10.14.3.0; 10.15.1.3 before 10.15.2.1; 10.16.1.1 |
| CVE-2015-1832 | 9.1 | Oct 3 | XML external entity (XXE) vulnerability in the SqlXmlUtil code in Apache Derby before 10.12.1.1, when a Java Security Manager is not in place, allows context-dependent attackers… Affected: 10.1.1.0; 10.1.2.1; 10.1.3.1; 10.2.1.6; 10.2.2.0; 10.3.3.0; +14 more |
| CVE-2010-2232 | 7.5 | Oct 23 | In Apache Derby 10.1.2.1, 10.2.2.0, 10.3.1.4, and 10.4.1.3, Export processing may allow an attacker to overwrite an existing file Affected: 10.1.2.1; 10.2.2.0; 10.3.1.4; 10.4.1.3 |
| CVE-2018-1313 | 5.3 | May 7 | In Apache Derby 10.3.1.4 to 10.14.1.0, a specially-crafted network packet can be used to request the Derby Network Server to boot a database whose location and contents are under… Affected: 10.3.1.4 through 10.14.1.0 |
| CVE-2009-4269 | – | Aug 16 | The password hash generation algorithm in the BUILTIN authentication functionality for Apache Derby before 10.6.1.0 performs a transformation that reduces the size of the set of… Affected: through 10.5.3.0 |
| CVE-2006-7217 | – | Jul 5 | Apache Derby before 10.2.1.6 does not determine schema privilege requirements during the DropSchemaNode bind phase, which allows remote authenticated users to execute arbitrary… Affected: 10.1.1.0; 10.1.2.1; 10.1.3.1 |
| CVE-2006-7216 | – | Jul 5 | Apache Derby before 10.2.1.6 does not determine privilege requirements for lock table statements at compilation time, and consequently does not enforce privilege requirements at… Affected: 10.1.1.0; 10.1.2.1; 10.1.3.1 |
| CVE-2005-4849 | – | Dec 31 | Apache Derby before 10.1.2.1 exposes the (1) user and (2) password attributes in cleartext via (a) the RDBNAM parameter of the ACCSEC command and (b) the output of the… Affected: through 10.1.1.0 |
Showing 8