Vendors / Hibernate Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Hibernate records in CISA KEV No Hibernate vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 64
Hibernate Validator before 6.2.0 and 7.0.0, by default and depending how it is used, may interpolate user-supplied input in a constraint violation message with Expression Language.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00781 · Published 2025-06-03 · Partial fix · 6.2.0, 7.0.0 +2 CWE-94
Priority MEDIUM 40
A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final.
CVSS 3.1 HIGH 7.4· Network · No auth · No interaction · EPSS 0.02929 · Published 2020-12-02 · Partial fix · 5.4.24.Final, 5.3.20.Final CWE-89
Priority LOW 33
A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.02126 · Published 2020-07-06 · Partial fix · 5.3.18, 5.4.18 +1 CWE-89
Priority LOW 31
A vulnerability was found in Hibernate-Validator.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.02157 · Published 2019-11-08 · Partial fix · 6.0.18.Final, 6.1.0.Final +1 CWE-79
Priority LOW 29
A flaw was found in Hibernate Validator version 6.1.2.Final.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.02351 · Published 2020-05-06 · Partial fix · 6.1.5.Final, 6.0.20.Final CWE-20
Priority LOW 28
A flaw was found in hibernate-validator's 'isValid' method in the org.hibernate.validator.internal.constraintvalidators.hv.SafeHtmlValidator class, which can be bypassed by omitting the tag ending in a less-than characte…
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00493 · Published 2024-11-07 · Partial fix · 6.2.0.Final CWE-79
Open these records in search → All records by CVSS severity
0 1 5 0 0
THREATIST.IORead the docs