DE
Product
Derby
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 1Medium 1Low 0
Watch
Add Derby to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-46337 | 9.8 | Nov 20 | A cleverly devised username might bypass LDAP authentication checks Affected: 10.1.1.0 before 10.14.3.0; 10.15.1.3 before 10.15.2.1; 10.16.1.1 |
| CVE-2015-1832 | 9.1 | Oct 3 | XML external entity (XXE) vulnerability in the SqlXmlUtil code in Apache Derby before 10.12.1.1, when a Java Security Manager is not in place, allows context-dependent attackers… Affected: 10.1.1.0; 10.1.2.1; 10.1.3.1; 10.2.1.6; 10.2.2.0; 10.3.3.0; +14 more |
Showing 2