Skip to content
OpenAdvisories

Package · Maven

com.orientechnologies:orientdb-core

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    CVE-2017-11467 Public exploit EPSS 73%

    OrientDB vulnerable to Improper Privilage Management leading to arbitrary command injection

    OrientDB through 2.2.22 does not enforce privilege requirements during "where" or "fetchplan" or "order by" use, which allows remote attackers to execute arbitrary OS commands via a crafted request.

    com.orientechnologies:orientdb-core Maven