Lucene search

K
cve[email protected]CVE-2003-0845
HistoryNov 17, 2003 - 5:00 a.m.

CVE-2003-0845

2003-11-1705:00:00
CWE-89
web.nvd.nist.gov
40
vulnerability
hsqldb
jboss
remote attackers
unauthorized activities
code execution
sql statements
tcp ports

8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.109 Low

EPSS

Percentile

95.0%

Unknown vulnerability in the HSQLDB component in JBoss 3.2.1 and 3.0.8 on Java 1.4.x platforms, when running in the default configuration, allows remote attackers to conduct unauthorized activities and possibly execute arbitrary code via certain SQL statements to (1) TCP port 1701 in JBoss 3.2.1, and (2) port 1476 in JBoss 3.0.8.

8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.109 Low

EPSS

Percentile

95.0%

Related for CVE-2003-0845