Skip to content
OpenAdvisories

Package · Maven

org.apache.derby:derby

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.3
    CVE-2018-1313 Public exploit

    Improper Access Control in Apache Derby

    In Apache Derby 10.3.1.4 to 10.14.1.0, a specially-crafted network packet can be used to request the Derby Network Server to boot a database whose location and contents are under the user's control. If the Derby Network Server is not running with a Java Secur…

    Apache Software Foundation Apache Derby org.apache.derby:derby derby Debian Ubuntu Maven
  • Medium —
    CVE-2009-4269

    Use of Password Hash With Insufficient Computational Effort in Apache Derby

    The password hash generation algorithm in the BUILTIN authentication functionality for Apache Derby before 10.6.1.0 performs a transformation that reduces the size of the set of inputs to SHA-1, which produces a small search space that makes it easier for loc…

    org.apache.derby:derby sun-javadb Ubuntu Maven
  • Medium —
    CVE-2006-7217

    Apache Derby SQL Injection

    Apache Derby before 10.2.1.6 does not determine schema privilege requirements during the DropSchemaNode bind phase, which allows remote authenticated users to execute arbitrary drop schema statements in SQL authorization mode.

    org.apache.derby:derby Maven
  • Medium —
    CVE-2005-4849

    Apache Derby exposes user and password attributes

    Apache Derby before 10.1.2.1 exposes the (1) user and (2) password attributes in cleartext via (a) the RDBNAM parameter of the ACCSEC command and (b) the output of the DatabaseMetaData.getURL function, which allows context-dependent attackers to obtain sensit…

    org.apache.derby:derby Maven