Login Request a demo
OR
Product
OrientDB
by Orientdb · last CVE Feb 20, 2026
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 1High 1Medium 4Low 1
Severity
All severities7Critical1High1Medium4Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add OrientDB to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-25448
6.4
0%
Feb 20
OrientDB 3.0.17 Stored Cross-Site Scripting via User Creation
Affected: 3.0.17
CVE-2019-25449
6.1
0%
Feb 20
OrientDB 3.0.17 Reflected Cross-Site Scripting via document endpoint
Affected: 3.0.17
CVE-2015-2918
6.1
1%
Dec 31
The Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 does not properly restrict use of FRAME elements, which makes it easier for remote…
Affected: 2.0.14; 2.1.0
CVE-2015-2913
5.9
2%
Dec 31
server/network/protocol/http/OHttpSessionManager.java in the Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 improperly relies on the…
Affected: 2.0.14; 2.1.0
Showing 4