CVE-2022-45136

🗓️ 14 Nov 2022 00:00:00Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 79 Views

Apache Jena SDB 3.17.0 and earlier vulnerable to JDBC Deserialisation attac

Reporter	Title	Published	Views	Family All 18
IBM Security Bulletins	Security Bulletin: Due to use of Apache Jena SDB, IBM Jazz Reporting Service is affected by a JDBC Deserialisation attack.	1 Dec 202506:25	–	ibm
ATTACKERKB	CVE-2022-45136	14 Nov 202216:15	–	attackerkb
CNNVD	Apache Jena 代码问题漏洞	14 Nov 202200:00	–	cnnvd
Cvelist	CVE-2022-45136 Apache Jena SDB allows arbitrary deserialisation via JDBC	14 Nov 202200:00	–	cvelist
Debian CVE	CVE-2022-45136	14 Nov 202200:00	–	debiancve
Github Security Blog	Apache Jena vulnerable to Deserialization of Untrusted Data	14 Nov 202219:00	–	github
NVD	CVE-2022-45136	14 Nov 202216:15	–	nvd
OSV	DEBIAN-CVE-2022-45136	14 Nov 202216:15	–	osv
OSV	GHSA-G2QW-6VRR-V6PQ Apache Jena vulnerable to Deserialization of Untrusted Data	14 Nov 202219:00	–	osv
OSV	UBUNTU-CVE-2022-45136	14 Nov 202216:15	–	osv

NVD

Vulners

Vulnrichment

Node

apache jena_sdbRange≤3.17.0

[
  {
    "vendor": "Apache Software Foundation",
    "product": "Apache Jena SDB",
    "versions": [
      {
        "version": "unspecified",
        "lessThanOrEqual": "3.17.0",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]