Skip to content

Product

debian/openjpa vulnerabilities

1 published CVE affecting debian/openjpa, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest debian/openjpa CVEs

Newest publication first

  1. CVE-2013-1768 Deserialization of Untrusted Data in Apache OpenJPA

    Published
    HighCVSS 7.5 EPSS 9.5%

    The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain crafted OpenJPA objects, which makes it easier for remote attackers to execute arbit...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.