Skip to content
OpenAdvisories

Package · Maven

com.h2database:h2

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.4
    CVE-2022-45868

    Password exposure in H2 Database

    The web-based admin console in H2 Database Engine before 2.2.220 can be started via the CLI with the argument -webAdminPassword, which allows the user to specify the password in cleartext for the web admin console. Consequently, a local user (or an attacker t…

    com.h2database:h2 h2database Debian Maven
  • High 8.1
    CVE-2021-23463

    XML External Entity (XXE) Injection

    The package com.h2database:h2 from 1.4.198 and before 2.0.202 are vulnerable to XML External Entity (XXE) Injection via the org.h2.jdbc.JdbcSQLXML class object, when it receives parsed string data from org.h2.jdbc.JdbcResultSet.getSQLXML() method. If it execu…

    com.h2database:h2 Maven