OR
Vendor
Orientdb
7
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2019-25449 | OR OrientDB Orientdb | 6.1 | Feb 20 | OrientDB 3.0.17 Reflected Cross-Site Scripting via document endpoint |
| CVE-2019-25448 | OR OrientDB Orientdb | 6.4 | Feb 20 | OrientDB 3.0.17 Stored Cross-Site Scripting via User Creation |
| CVE-2019-25447 | OR OrientDB Orientdb | 3.5 | Feb 20 | OrientDB 3.0.17 Cross-Site Request Forgery |
| CVE-2017-11467 | OR Orientdb Orientdb | 9.8 | Jul 20 | OrientDB through 2.2.22 does not enforce privilege requirements during "where" or "fetchplan" or "order by" use, which allows remote attackers to execute arbitrary OS commands via… |
| CVE-2015-2918 | OR Orientdb Orientdb | 6.1 | Dec 31 | The Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 does not properly restrict use of FRAME elements, which makes it easier for remote… |
| CVE-2015-2913 | OR Orientdb Orientdb | 5.9 | Dec 31 | server/network/protocol/http/OHttpSessionManager.java in the Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 improperly relies on the… |
| CVE-2015-2912 | OR Orientdb Orientdb | 8.8 | Dec 31 | The JSONP endpoint in the Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 does not properly restrict callback values, which allows… |