Vendors / swaldman Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 2 CVSS 7.0–8.9
Exploited now swaldman records in CISA KEV No swaldman vulnerabilities are listed in CISA KEV.
Priority MEDIUM 41
c3p0, a JDBC Connection pooling library, is vulnerable to attack via maliciously crafted Java-serialized objects and `javax.naming.Reference` instances.
CVSS 4.0 HIGH 8.9· Adjacent network · Low privileges · No interaction · EPSS 0.00595 · Published 2026-02-26 · Partial fix · 0.12.0 CWE-502
Priority LOW 35
c3p0 is a JDBC Connection pooling library.
CVSS 4.0 MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.0048 · Published 2026-06-30 · Partial fix · 0.14.0 CWE-502
Priority LOW 33
mchange-commons-java is a Java library of shared utility classes used by mchange projects like the c3p0 connection pool.
CVSS 3.1 HIGH 7.1· Adjacent network · Low privileges · No interaction · EPSS 0.00194 · Published 2026-07-01 · Partial fix · 0.6.0 CWE-470
Open these records in search → All records by CVSS severity
Critical0 High2 Medium1 Low0 No CVSS0