The vulnerability of the Apache Derby database management system, related to resource management errors, allows attackers to gain unauthorized access to protected information or cause service failures.

🗓️ 10 Jun 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

Apache Derby database suffers resource management errors allowing remote attackers to access protected data.

Reporter	Title	Published	Views	Family All 36
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilites affect IBM Engineering products.	26 Feb 202120:22	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Derby affects IBM Cúram Social Program Management (CVE-2015-1832)	17 Jun 201813:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for June 2024 - Multiple CVEs addressed	7 Aug 202405:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Open Source software used by Cloud Pak System	31 Mar 202314:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect the IBM App Connect Enterprise Toolkit and the IBM Integration Bus Toolkit	30 Jun 202309:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Planning Analytics (CVE-2018-3180, CVE-2013-1624, CVE-2018-1933, CVE-2015-1832, CVE-2018-15494)	25 Jul 201919:00	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in dependent component distributed in IBM Development Package for Apache Spark (CVE-2015-1832)	15 Jun 201807:06	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insights 1.6.12 addresses multiple security vulnerabilities.	2 Apr 202411:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM WebSphere eXtreme Scale Liberty Deployment.	27 May 202108:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Change Data Capture is affected by an Apache Derby open source library vulnerability (CVE-2015-1832)	31 Jan 201921:25	–	ibm

Vulners

Node

oracle primavera_unifierMatch16.2

oracle primavera_unifierMatch16.1

oracle weblogic_serverMatch12.2.1.3

oracle primavera_unifierRange17.1–17.12

oracle primavera_unifierMatch18.8

oracle primavera_unifierMatch19.12

oracle oracle_knowledgeRange8.6.0–8.6.3

apache derbyRange10.1.1.0–10.12.1.1

oracle oracle_knowledgeRange8.5.1.0–8.5.1.7

Source	Link
ibm	www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-websphere-extreme-scale-liberty-deployment/
issues	www.issues.apache.org/jira/browse/DERBY-6807
lists	www.lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E
lists	www.lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451@%3Csolr-user.lucene.apache.org%3E
lists	www.lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E
lists	www.lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E
lists	www.lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5@%3Csolr-user.lucene.apache.org%3E
oracle	www.oracle.com/security-alerts/cpuapr2020.html
oracle	www.oracle.com/security-alerts/cpuoct2020.html
oracle	www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html

20 Feb 2025 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 26.4

CVSS 39.1

EPSS0.12173