EUVD-2022-5628

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

XML external entity vulnerability in Apache Derby allows file reading and denial of service attacks

Reporter	Title	Published	Views	Family All 36
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilites affect IBM Engineering products.	26 Feb 202120:22	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Derby affects IBM Cúram Social Program Management (CVE-2015-1832)	17 Jun 201813:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for June 2024 - Multiple CVEs addressed	7 Aug 202405:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Open Source software used by Cloud Pak System	31 Mar 202314:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect the IBM App Connect Enterprise Toolkit and the IBM Integration Bus Toolkit	30 Jun 202309:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Planning Analytics (CVE-2018-3180, CVE-2013-1624, CVE-2018-1933, CVE-2015-1832, CVE-2018-15494)	25 Jul 201919:00	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in dependent component distributed in IBM Development Package for Apache Spark (CVE-2015-1832)	15 Jun 201807:06	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insights 1.6.12 addresses multiple security vulnerabilities.	2 Apr 202411:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM WebSphere eXtreme Scale Liberty Deployment.	27 May 202108:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Change Data Capture is affected by an Apache Derby open source library vulnerability (CVE-2015-1832)	31 Jan 201921:25	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "95c1cd31-733c-36ea-b85a-c9ae09eb9dc8",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "4ac82925-9d03-3943-b009-6f5552dfaee7",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2015-1832
issues	www.issues.apache.org/jira/browse/DERBY-6807
lists	www.lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E
lists	www.lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451@%3Csolr-user.lucene.apache.org%3E
lists	www.lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E
lists	www.lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E
lists	www.lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5@%3Csolr-user.lucene.apache.org%3E
svn	www.svn.apache.org/viewvc
oracle	www.oracle.com/security-alerts/cpuapr2020.html
oracle	www.oracle.com/security-alerts/cpuoct2020.html

03 Oct 2025 20:07Current

9High risk

Vulners AI Score9

CVSS 39.1

CVSS 26.4

EPSS0.00818