HV
Product
Hibernate Validator
by Redhat · last CVE Jun 3, 2025
5
CVEs
0
On KEV
7.3
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 2Low 0
Watch

Add Hibernate Validator to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-35036
7.3
1%
Jun 3
Hibernate Validator before 6.2.0 and 7.0.0, by default and depending how it is used, may interpolate user-supplied input in a constraint violation message with Expression Language
Affected: before 6.2.0
CVE-2017-7536
7.0
0%
Jan 10
In Hibernate Validator 5.2.x before 5.2.5 final, 5.3.x, and 5.4.x, it was found that when the security manager's reflective permissions, which allows it to access the private…
Affected: 5.2.0 before 5.2.5; 5.3.0 before 5.3.6; 5.4.0 before 5.4.2
CVE-2019-10219
6.1
2%
Nov 8
A vulnerability was found in Hibernate-Validator
Affected: before 6.0.18; 6.1.0; 6.1.0; 6.1.0; 6.1.0; 6.1.0; +1 more
CVE-2020-10693
5.3
2%
May 6
A flaw was found in Hibernate Validator version 6.1.2.Final
Affected: 5.0.0 before 6.0.20; 6.1.2 before 6.1.5; 7.0.0
CVE-2014-3558
–
3%
Sep 30
ReflectionHelper (org.hibernate.validator.util.ReflectionHelper) in Hibernate Validator 4.1.0 before 4.2.1, 4.3.x before 4.3.2, and 5.x before 5.1.2 allows attackers to bypass…
Affected: 4.3.0 before 4.3.2; 5.0.0 through 5.0.3; 5.1.0 before 5.1.2; 4.1.0; 4.2.0; 4.2.0; +2 more
Showing 5