com.orientechnologies/orientdb-core vulnerabilities

Latest com.orientechnologies/orientdb-core CVEs

Newest publication first

1. CVE-2017-11467 OrientDB vulnerable to Improper Privilage Management leading to arbitrary command injection

   Published 2017-07-20

   Critical·CVSS 9.8 EPSS 73.1% Framework module Public exploit

   OrientDB through 2.2.22 does not enforce privilege requirements during "where" or "fetchplan" or "order by" use, which allows remote attackers to execute arbitrary OS commands via a crafted request.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.