Skip to content

Product

apache openjpa vulnerabilities

1 published CVE affecting apache openjpa, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest apache openjpa CVEs

Newest publication first

  1. CVE-2013-1768 Deserialization of Untrusted Data in Apache OpenJPA

    Published
    HighCVSS 7.5 EPSS 9.5%

    The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain crafted OpenJPA objects, which makes it easier for remote attackers to execute arbit...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.