com.orientechnologies:orientdb-distributed (1.6.1), com.orientechnologies:orientdb-graphdb (1.6.1) potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.6.1)

com.orientechnologies:orientdb-server MAVEN version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-distributed 1.6.1 -...

com.orientechnologies:orientdb (1.4.1), com.orientechnologies:orientdb-distributed (1.4.1) potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.4.1)

com.orientechnologies:orientdb-server MAVEN version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb 1.4.1 - com.orientechnologies:orientdb-distributed 1.4...

com.orientechnologies:orientdb (1.5.0), com.orientechnologies:orientdb-distributed (1.5.0) +1 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.5.0)

com.orientechnologies:orientdb-server MAVEN version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb 1.5.0 - com.orientechnologies:orientdb-distributed 1.5...

com.orientechnologies:orientdb-community (1.7.3), com.orientechnologies:orientdb-distributed (1.7.3) +1 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.7.3)

com.orientechnologies:orientdb-server MAVEN version 1.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-community 1.7.3 -...

com.orientechnologies:orientdb-distributed (1.7-rc2), com.orientechnologies:orientdb-graphdb (1.7-rc2) potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.7-rc2)

com.orientechnologies:orientdb-server MAVEN version 1.7-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-distributed 1.7-rc2 -...

com.orientechnologies:orientdb-community (1.7.10), com.orientechnologies:orientdb-distributed (1.7.10) +4 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.7.10)

com.orientechnologies:orientdb-server MAVEN version 1.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-community 1.7.10 -...

com.orientechnologies:orientdb-distributed (1.6.2), com.orientechnologies:orientdb-graphdb (1.6.2) potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.6.2)

com.orientechnologies:orientdb-server MAVEN version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-distributed 1.6.2 -...

com.orientechnologies:orientdb-distributed (1.7-rc1), com.orientechnologies:orientdb-graphdb (1.7-rc1) potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.7-rc1)

com.orientechnologies:orientdb-server MAVEN version 1.7-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-distributed 1.7-rc1 -...

com.orientechnologies:orientdb (1.0rc9) potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.0rc9)

com.orientechnologies:orientdb-server MAVEN version 1.0rc9 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb 1.0rc9 Source cves: CVE-2015-2913 Source advisory:...

com.orientechnologies:orientdb-distributed (1.6.4), com.orientechnologies:orientdb-graphdb (1.6.4) potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.6.4)

com.orientechnologies:orientdb-server MAVEN version 1.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-distributed 1.6.4 -...

com.orientechnologies:orientdb (1.0.1) potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.0.1)

com.orientechnologies:orientdb-server MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb 1.0.1 Source cves: CVE-2015-2913 Source advisory:...

com.orientechnologies:orientdb-distributed (1.6.3), com.orientechnologies:orientdb-graphdb (1.6.3) potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.6.3)

com.orientechnologies:orientdb-server MAVEN version 1.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-distributed 1.6.3 -...

com.orientechnologies:orientdb-community (1.7.7), com.orientechnologies:orientdb-distributed (1.7.7) +2 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.7.7)

com.orientechnologies:orientdb-server MAVEN version 1.7.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-community 1.7.7 -...

com.orientechnologies:orientdb (1.4.0), com.orientechnologies:orientdb-distributed (1.4.0) potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.4.0)

com.orientechnologies:orientdb-server MAVEN version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb 1.4.0 - com.orientechnologies:orientdb-distributed 1.4...

com.orientechnologies:orientdb (>=1.0rc9, <=1.5.1), com.orientechnologies:orientdb-community (>=1.6.5, <=2.0.14) +23 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (>=1.0rc9, <=2.0.14)

com.orientechnologies:orientdb-server MAVEN version =1.0rc9, =1.0rc9, =1.6.5, =1.1.0, =2.0-m3, =1.1.0, =2.0-m3, =1.7, =1.0, =0.1.17, =0.2.14 - org.ops4j.orient.samples:orient-sample1 0.3.0 - org.ops4j.orient.samples:orient-sample2 0.3.0 - org.ops4j.orient:orient-ra 0.3.0 -...

CVE-2015-2913

OrientDB Server Community Edition prior to 2.0.15 and 2.1.x prior to 2.1.1 is affected by CVE-2015-2913 due to using java.util.Random for Session ID generation in server/network/protocol/http/OHttpSessionManager.java, which can allow remote attackers to predict session IDs. The issue is documente...