OESA-2023-1944 hsqldb1 security update

🗓️ 22 Dec 2023 11:06:32Reported by GoogleType

osv

osv🔗 osv.dev👁 4 Views

Security fix for hsqldb1 to stop remote code execution via statements; upgrade to 2.7.1.

Reporter	Title	Published	Views	Family All 97
GithubExploit	Exploit for Unsafe Reflection in Hsqldb Hypersql_Database	24 Nov 202310:30	–	githubexploit
IBM Security Bulletins	Security Bulletin: Vulnerability in HSQLDB might affect IBM Storage Copy Data Management.	24 Jan 202519:15	–	ibm
IBM Security Bulletins	Security Bulletin: Common vulnerabilities addressed in Cloudera Data Platform 7.1.9 HF2	26 Mar 202503:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in HSQLDB	30 Jan 202317:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by remote code execution and sensitive information vulnerabilities (CVE-2022-31684, CVE-2022-41853)	4 Apr 202316:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by a remote code execution vulnerability in HSQLDB (CVE-2022-41853)	5 Dec 202215:55	–	ibm
IBM Security Bulletins	Security Bulletin: hsqldb-2.0.0.jar shipped with IBM Tivoli Business Service Manager is vulnerable to remote code execution (CVE-2022-41853)	9 Nov 202210:08	–	ibm
Tenable Nessus	Amazon Linux 2 : hsqldb (ALAS-2023-1914)	24 Jan 202300:00	–	nessus
Tenable Nessus	Amazon Linux AMI : hsqldb (ALAS-2023-1666)	24 Jan 202300:00	–	nessus
Tenable Nessus	CentOS 7 : hsqldb (RHSA-2022:8560)	1 Dec 202200:00	–	nessus

Source	Link
openeuler	www.openeuler.org/en/security/safety-bulletin/detail.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-41853

03 Sep 2025 06:18Current

9.7High risk

Vulners AI Score9.7

CVSS 3.18 - 9.8

EPSS0.70144

SSVC

remote code execution statements vulnerability method class names java security