Skip to content
OpenAdvisories

Package · Debian

derby

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Critical 9.8
    CVE-2022-46337

    Apache Derby: LDAP injection vulnerability in authenticator

    A cleverly devised username might bypass LDAP authentication checks. In LDAP-authenticated Derby installations, this could let an attacker fill up the disk by creating junk Derby databases. In LDAP-authenticated Derby installations, this could also allow the …

    Apache Software Foundation Apache Derby org.apache.derby:derby derby Debian Ubuntu Maven
  • Medium 5.3
    CVE-2018-1313 Public exploit

    Improper Access Control in Apache Derby

    In Apache Derby 10.3.1.4 to 10.14.1.0, a specially-crafted network packet can be used to request the Derby Network Server to boot a database whose location and contents are under the user's control. If the Derby Network Server is not running with a Java Secur…

    Apache Software Foundation Apache Derby org.apache.derby:derby derby Debian Ubuntu Maven
  • Critical 9.1
    CVE-2015-1832 EPSS 12%

    Improper Restriction of XML External Entity Reference in Apace Derby

    XML external entity (XXE) vulnerability in the SqlXmlUtil code in Apache Derby before 10.12.1.1, when a Java Security Manager is not in place, allows context-dependent attackers to read arbitrary files or cause a denial of service (resource consumption) via v…

    org.apache.derby:derby derby derby Debian Ubuntu Maven