Lucene search

Improper Input Validation in Hibernate Validator

🗓️ 04 Jun 2021 21:34:36Reported by GitHub Advisory DatabaseType

github🔗 github.com👁 140 Views

Improper input validation flaw in Hibernate Validator version 6.1.2.Fina

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 68
CVE	CVE-2020-10693	6 May 202014:15	–	cve
IBM Security Bulletins	Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to a security vulnerability (CVE-2020-10693)	20 Jan 202109:05	–	ibm
IBM Security Bulletins	Security Bulletin: Websphere Hibernate Validator Vulnerability Affects IBM Control Center (CVE-2020-10693)	15 Jan 202122:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is affected by a vulnerability in WebSphere Application Server Liberty (CVE-2020-10693)	11 Dec 202015:53	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in WebSphere Application Server Liberty affects IBM Z Development and Test Environment - Jan 2021	29 Jan 202114:27	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Hibernate Validator affects WebSphere Application Server Liberty (CVE-2020-10693)	14 Oct 202022:42	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Asset Analyzer is affected by a vulnerability in WebSphere Application Server Liberty (CVE-2020-10693)	23 Mar 202122:22	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Hibernate Validator affects WebSphere Application Server Liberty bundled with IBM WebSphere Application Server Patterns (CVE-2020-10693)	15 Oct 202016:29	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Hibernate Validator affects Liberty for Java for IBM Cloud (CVE-2020-10693)	7 Oct 202216:01	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Hibernate Validator may affect IBM WebSphere Application Server Liberty shipped with IBM Digital Business Automation Workflow family products (CVE-2020-10693)	14 Sep 202215:28	–	ibm

Vulners

Node

org.hibernate.validator hibernate-validatorRange≤6.0.19.Final

org.hibernate.validator hibernate-validatorRange6.1.0.Final–6.1.4.Final

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-10693
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
ibm	www.ibm.com/support/pages/node/6348216
lists	www.lists.apache.org/thread.html/rb8dca19a4e52b60dab0ab21e2ff9968d78f4b84e4033824db1dd24b4@%3Cpluto-scm.portals.apache.org%3E
lists	www.lists.apache.org/thread.html/rd418deda6f0ebe658c2015f43a14d03acb8b8c2c093c5bf6b880cd7c@%3Cpluto-dev.portals.apache.org%3E
lists	www.lists.apache.org/thread.html/rf9c17c3efc4a376a96e9e2777eee6acf0bec28e2200e4b35da62de4a@%3Cpluto-dev.portals.apache.org%3E
oracle	www.oracle.com/security-alerts/cpuapr2022.html
github	www.github.com/advisories/GHSA-rmrm-75hp-phr2

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

04 Jun 2021 21:36Current

3Low risk

Vulners AI Score3

CVSS25

CVSS35.3

EPSS0.00036

CWE-20