Skip to content

Product

debian/libhibernate3-java vulnerabilities

3 published CVES affecting debian/libhibernate3-java, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
1
Medium
0
Low
0
Unscored
2
CISA KEV
0

Latest debian/libhibernate3-java CVEs

Newest publication first

  3. CVE-2020-25638 SQL injection in hibernate-core

    Published
    HighCVSS 7.4

    A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SQL comments of the query. This flaw could allow an attacker to access u...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.