Derby

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2018-1313 May 07, 13:29 Maven MEDIUM PATCH This Month

In Apache Derby 10.3.1.4 to 10.14.1.0, a specially-crafted network packet can be used to request the Derby Network Server to boot a database whose location and contents are under the user's control. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable.

Apache Java Information Disclosure Oracle Weblogic Server +1

NVD

CVSS 3.1

5.3

EPSS

4.5%

CVE-2015-1832 Oct 03, 21:59 Maven CRITICAL PATCH Act Now

XML external entity (XXE) vulnerability in the SqlXmlUtil code in Apache Derby before 10.12.1.1, when a Java Security Manager is not in place, allows context-dependent attackers to read arbitrary. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Denial Of Service Apache Java XXE Derby

NVD

CVSS 3.0

9.1

EPSS

0.8%

CVE-2018-1313 Maven

EPSS 5% CVSS 5.3

MEDIUM PATCH This Month

Apache Java Information Disclosure +3

NVD

CVE-2015-1832 Maven

EPSS 1% CVSS 9.1

CRITICAL PATCH Act Now

Denial Of Service Apache Java +2

NVD