CVE-2022-41853

🗓️ 19 Oct 2022 12:47:35Reported by redhat.comType

redhatcve

redhatcve🔗 access.redhat.com👁 167 Views

A flaw in HSQLDB package allows untrusted inputs to execute remote code via static methods leading to code executio

Reporter	Title	Published	Views	Family All 97
GithubExploit	Exploit for Unsafe Reflection in Hsqldb Hypersql_Database	24 Nov 202310:30	–	githubexploit
IBM Security Bulletins	Security Bulletin: Vulnerability in HSQLDB might affect IBM Storage Copy Data Management.	24 Jan 202519:15	–	ibm
IBM Security Bulletins	Security Bulletin: Common vulnerabilities addressed in Cloudera Data Platform 7.1.9 HF2	26 Mar 202503:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in HSQLDB	30 Jan 202317:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by remote code execution and sensitive information vulnerabilities (CVE-2022-31684, CVE-2022-41853)	4 Apr 202316:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by a remote code execution vulnerability in HSQLDB (CVE-2022-41853)	5 Dec 202215:55	–	ibm
IBM Security Bulletins	Security Bulletin: hsqldb-2.0.0.jar shipped with IBM Tivoli Business Service Manager is vulnerable to remote code execution (CVE-2022-41853)	9 Nov 202210:08	–	ibm
Tenable Nessus	Amazon Linux 2 : hsqldb (ALAS-2023-1914)	24 Jan 202300:00	–	nessus
Tenable Nessus	Amazon Linux AMI : hsqldb (ALAS-2023-1666)	24 Jan 202300:00	–	nessus
Tenable Nessus	CentOS 7 : hsqldb (RHSA-2022:8560)	1 Dec 202200:00	–	nessus

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-41853
hsqldb	www.hsqldb.org/doc/2.0/guide/sqlroutines-chapt.html
github	www.github.com/advisories/GHSA-77xx-rxvh-q682
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

24 Oct 2024 16:31Current

9.1High risk

Vulners AI Score9.1

CVSS 3.19.8

EPSS0.70144

hsqldb remote code execution static methods access control java classpath