Lucene search
CVE-2020-25638
A flaw in hibernate-core allows SQL injection via JPA Criteria API in versions prior to 5.4.23.Final. Allows unauthorized access
Show more
| Reporter | Title | Published | Views | Family All 63 |
|---|---|---|---|---|
 | Sql injection | 2 Dec 202015:15 | – | prion |
 | [SECURITY] [DSA 4908-1] libhibernate3-java security update | 29 Apr 202119:40 | – | debian |
| [SECURITY] [DLA 2512-1] libhibernate3-java security update | 3 Jan 202122:30 | – | debian |
| [SECURITY] [DSA 4908-1] libhibernate3-java security update | 29 Apr 202119:40 | – | debian |
 | CVE-2020-25638 | 13 Nov 202004:24 | – | redhatcve |
 | CVE-2020-25638 | 2 Dec 202014:36 | – | vulnrichment |
 | (RHSA-2020:5254) Important: Red Hat Single Sign-On 7.4.3 one-off security update | 30 Nov 202017:25 | – | redhat |
| (RHSA-2020:5175) Important: Red Hat JBoss Enterprise Application Platform 7.3 security update | 23 Nov 202013:23 | – | redhat |
| (RHSA-2020:5302) Important: Red Hat build of Quarkus 1.7.5 SP1 release and security update | 1 Dec 202011:41 | – | redhat |
| (RHSA-2020:5174) Important: Red Hat JBoss Enterprise Application Platform 7.3.3 security update | 23 Nov 202013:23 | – | redhat |
10
Node
Node
[
{
"product": "hibernate-core",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Hibernate ORM versions before 5.4.24.Final"
}
]
}
]Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo02 Dec 2020 15:15Current
7.6High risk
Vulners AI Score7.6
CVSS25.8
CVSS37.4
EPSS0.00593
SSVC