CVE-2018-1313

🗓️ 07 May 2018 13:00:00Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 139 Views

Apache Derby 10.3.1.4 to 10.14.1.0 allows unauthorized database acces

Reporter	Title	Published	Views	Family All 38
IBM Security Bulletins	Security Bulletin: A denial-of-service attack, heap use after free, network server exploit, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service	8 Jul 202517:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilites affect IBM Engineering products.	26 Feb 202120:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for June 2024 - Multiple CVEs addressed	7 Aug 202405:53	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Derby security vulnerabilities in IBM System Dashboard for Enterprise Content Manager (affected, not vulnerable)	26 Jul 202223:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Open Source software used by Cloud Pak System	31 Mar 202314:10	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Derby as used by IBM QRadar SIEM is vulnerable to Improper Input Validation (CVE-2018-1313)	13 Oct 202019:34	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Apache Derby could affect IBM Performance Management products (CVE-2018-1313)	29 Aug 201815:04	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Derby affect IBM Operations Analytics - Log Analysis (CVE-2018-1313)	2 Nov 202216:45	–	ibm
IBM Security Bulletins	Security Bulletin: ITCAM for Transactions affected by the Security vulnerability CVE-2018-1313 found in derbyclient-10.10.2.0.jar and its perivious versions	30 Aug 202311:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli Netcool Impact is affected by an Apache Derby vulnerability (CVE-2018-1313)	4 Oct 201804:15	–	ibm

NVD

Vulners

Node

apache derbyRange10.3.1.4–10.14.1.0

Node

oracle weblogic_serverMatch12.2.1.3

[
  {
    "product": "Apache Derby",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "10.3.1.4 to 10.14.1.0"
      }
    ]
  }
]

Source	Link
oracle	www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
securityfocus	www.securityfocus.com/bid/104140
lists	www.lists.apache.org/thread.html/r437d94437e6aef31af689b1e7025d024d676fd1ea9901d74e3e9ae48%40%3Cissues.hive.apache.org%3E
lists	www.lists.apache.org/thread.html/re29ab90978e6c997377fb975f674f7514f6beb642bbf79deb45477e5%40%3Cdev.hive.apache.org%3E
markmail	www.markmail.org/message/akkappppxcdqrgxk
lists	www.lists.apache.org/thread.html/r6755f48d4f5e44e39bba7dbf8d746678239d7f1f2cc108125519ce53%40%3Cissues.hive.apache.org%3E
lists	www.lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E
lists	www.lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E
lists	www.lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E

21 Nov 2024 03:59Current

6.2Medium risk

Vulners AI Score6.2

CVSS 23.5

CVSS 3.15.3

EPSS0.00772