Skip to content
OpenAdvisories

Package · Debian

derby

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-46337

    Apache Derby: LDAP injection vulnerability in authenticator

    A cleverly devised username might bypass LDAP authentication checks. In LDAP-authenticated Derby installations, this could let an attacker fill up the disk by creating junk Derby databases. In LDAP-authenticated Derby installations, this could also allow the …

    Apache Software Foundation Apache Derby druid spark-4.0-scala-2.13 Debian Ubuntu Wolfi Maven
  • Critical 9.1
    CVE-2015-1832 EPSS 12%

    Improper Restriction of XML External Entity Reference in Apace Derby

    XML external entity (XXE) vulnerability in the SqlXmlUtil code in Apache Derby before 10.12.1.1, when a Java Security Manager is not in place, allows context-dependent attackers to read arbitrary files or cause a denial of service (resource consumption) via v…

    org.apache.derby:derby derby derby Debian Ubuntu Maven