Skip to content

Vendor

org.apache.openjpa vulnerabilities

1 published CVE affecting org.apache.openjpa, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of org.apache.openjpa alerts

Products

Latest org.apache.openjpa CVEs

Newest publication first

  1. CVE-2013-1768 Deserialization of Untrusted Data in Apache OpenJPA

    Published
    HighCVSS 7.5 EPSS 9.5%

    The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain crafted OpenJPA objects, which makes it easier for remote attackers to execute arbit...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.