Read the docs

Hibernate

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Hibernate records in CISA KEV

No Hibernate vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in Hibernate Orm · all components

TI-2020-15656 CVE-2020-25638 · GHSA-j8jw-g6fq-mp7h

SQL injection in hibernate-core

Priority MEDIUM 40

A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.02929 Published 2020-12-02 Partial fix · 5.4.24.Final, 5.3.20.Final CWE-89
TI-2019-11104 CVE-2019-14900 · GHSA-8grg-q944-cch5

SQL injection in Hibernate

Priority LOW 33

A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02126 Published 2020-07-06 Partial fix · 5.3.18, 5.4.18 +1 CWE-89
Open these records in search →