Odata4j Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Odata4j Project records in CISA KEV

No Odata4j Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Odata4j 3 records MEDIUM

Records

3 records in Odata4j · all components

TI-2016-09061 CVE-2016-11024 · GHSA-f96g-24cg-f24w

odata4j 0.7.0 allows ExecuteJPQLQueryCommand.java SQL injection.

MEDIUM 45

odata4j 0.7.0 allows ExecuteJPQLQueryCommand.java SQL injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01411 Published 2020-03-30 Will not fix CWE-89

TI-2016-09060 CVE-2016-11023 · GHSA-2382-qx5h-rvqh

odata4j 0.7.0 allows ExecuteCountQueryCommand.java SQL injection.

MEDIUM 45

odata4j 0.7.0 allows ExecuteCountQueryCommand.java SQL injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01411 Published 2020-03-30 Will not fix CWE-89

TI-2014-00165 CVE-2014-0171 · GHSA-gq3w-xqf6-838r

XML external entity (XXE) vulnerability in StaxXMLFactoryProvider2 in Odata4j, as used in…

LOW 27

XML external entity (XXE) vulnerability in StaxXMLFactoryProvider2 in Odata4j, as used in Red Hat JBoss Data Virtualization before 6.0.0 patch 4, allows remote attackers to read arbitrary files via a crafted request to a…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0211 Published 2015-01-15 Fixed

Open these records in search →

Critical	2
High	0
Medium	1
Low	0
No CVSS	0