openjpa: Remote arbitrary code execution by creating a serialized object and leveraging improperly secured server programs

🗓️ 19 Dec 2013 22:49:00Reported by RedHatType

OpenJPA prior versions allow remote code execution via crafted serialized objects and insecure server programs.

Reporter	Title	Published	Views	Family All 47
IBM Security Bulletins	Security Bulletin: Potential security vulnerability in WebSphere Application Server CVE-2013-1768 PM86780	26 Sep 202205:45	–	ibm
IBM Security Bulletins	Security Bulletin: Potential Security Vulnerabilities fixed in IBM WebSphere Application Server 6.1.0.47	25 Sep 202221:06	–	ibm
IBM Security Bulletins	WebSphere Application Server and IBM HTTP Server Security Bulletin List	13 Jul 202218:04	–	ibm
IBM Security Bulletins	Security Bulletin: Potential Security Vulnerabilities fixed in IBM WebSphere Application Server 7.0.0.29	26 Sep 202205:45	–	ibm
IBM Security Bulletins	Security Bulletin: OpenJPA as used in IBM QRadar SIEM is vulnerable to remote code execution. (CVE-2013-1768)	6 Feb 201921:55	–	ibm
IBM Security Bulletins	Security Bulletin: Potential Security Vulnerabilities fixed in IBM WebSphere Application Server 8.0.0.7	25 Sep 202221:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Java and Node.js packages affect IBM Voice Gateway	11 Jan 202318:41	–	ibm
IBM Security Bulletins	Security Bulletin: Potential Security Vulnerabilities fixed in IBM WebSphere Application Server 8.5.5	25 Sep 202222:39	–	ibm
CVE	CVE-2013-1768	11 Jul 201322:00	–	cve
Cvelist	CVE-2013-1768	11 Jul 201322:00	–	cvelist

Vulners

Node

AND

Node

AND

Node

AND

Source	Link
access	www.access.redhat.com/security/cve/CVE-2013-1768
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2013-1768
cve	www.cve.org/CVERecord

28 Jan 2026 22:54Current

7.7High risk

Vulners AI Score7.7

CVSS 27.5

EPSS0.09511