RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.1.11 on RHEL 7 (RHSA-2025:9582)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:9582 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release o...

Security Bulletin: IBM Security Verify Governance is vulnerable to SQL injection due to use of Hibernate ORM (CVE-2020-25638)

Summary IBM Security Verify Governance uses Hibernate ORM which is vulnerable to SQL injection, caused by misconfiguration for hibernate.usesqlcomments. A remote attacker could send specially-crafted SQL statements to manipulate data in the back-end databaseCVE-2020-25638. The affected jar was...

org.hibernate:hibernate-annotations (3.4.0.cr2), org.hibernate:hibernate-c3p0 (3.3.0.cr2) +12 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (3.3.0.cr2)

org.hibernate:hibernate-core MAVEN version 3.3.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - org.hibernate:hibernate-annotations 3.4.0.cr2 - org.hibernate:hibernate-c3p0 3.3.0.cr2 -...

be.thematchbox:abstractriver (>=1.0.1, <=1.1.0), com.github.levants:lightmare (0.1.1) +37 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (4.3.4.final)

org.hibernate:hibernate-core MAVEN version 4.3.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - be.thematchbox:abstractriver =1.0.1, =0.13, =0.1.0, =0.5.0, =0.5.0, =1.0.0.rc1, =3.0.2.release,...

com.blazebit:blaze-persistence-core-testsuite (>=1.1.0, <=1.2.0-alpha3), com.blazebit:blaze-persistence-distribution (1.2.0-alpha3) +201 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (4.2.21.final)

org.hibernate:hibernate-core MAVEN version 4.2.21.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - com.blazebit:blaze-persistence-core-testsuite =1.1.0, =1.1.0, =1.2.0-alpha1, =1.3.6, =1.3.6,...

com.blazebit:blaze-persistence-core-testsuite (1.0.6), com.blazebit:blaze-persistence-entity-view-testsuite (1.0.6) +17 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (4.2.14.final)

org.hibernate:hibernate-core MAVEN version 4.2.14.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - com.blazebit:blaze-persistence-core-testsuite 1.0.6 -...

org.hibernate:hibernate-annotations (3.5.0.beta-1), org.hibernate:hibernate-c3p0 (3.5.0.beta-1) +13 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (3.5.0.beta-1)

org.hibernate:hibernate-core MAVEN version 3.5.0.beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - org.hibernate:hibernate-annotations 3.5.0.beta-1 - org.hibernate:hibernate-c3p0 3.5.0.beta-1 -...

org.hibernate:hibernate-c3p0 (4.0.0.cr3), org.hibernate:hibernate-ehcache (4.0.0.cr3) +8 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (4.0.0.cr3)

org.hibernate:hibernate-core MAVEN version 4.0.0.cr3 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - org.hibernate:hibernate-c3p0 4.0.0.cr3 - org.hibernate:hibernate-ehcache 4.0.0.cr3 -...

br.net.woodstock.rockframework:rockframework-domain (>=1.2.1, <=1.2.2), com.googlecode:jpa-scoped-manager (1.1) +42 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (3.5.0-final)

org.hibernate:hibernate-core MAVEN version 3.5.0-final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - br.net.woodstock.rockframework:rockframework-domain =1.2.1, =1.9.3, =3.0-rc1, =3.1.18.release,...

com.cedarsoft.business:db (>=1.0.1, <=1.0.2), com.cedarsoft.db:genericdao (>=1.0.0, <=1.0.1) +72 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (3.5.4-final)

org.hibernate:hibernate-core MAVEN version 3.5.4-final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - com.cedarsoft.business:db =1.0.1, =1.0.0, =1.0.0, =3.4.3, =3.4.3, =2.0-beta2, =0.8.0, =0.8.0,...

com.googlecode.genericdao:dao-hibernate (1.2.0), com.googlecode.genericdao:search-hibernate (1.2.0) +17 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (4.2.0.cr1)

org.hibernate:hibernate-core MAVEN version 4.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - com.googlecode.genericdao:dao-hibernate 1.2.0 - com.googlecode.genericdao:search-hibernate 1.2.0 -...

com.bstek.uflo:uflo-console (>=2.0.0, <=2.0.1), com.bstek.uflo:uflo-core (>=2.0.0, <=2.0.1) +21 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (3.6.5.final)

org.hibernate:hibernate-core MAVEN version 3.6.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - com.bstek.uflo:uflo-console =2.0.0, =2.0.0, =2.0.0, =2.0.1 -...

com.rexsl:rexsl-maven-plugin (>=0.4.9, <=0.4.11), org.hibernate:hibernate-c3p0 (4.3.0.beta1) +6 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (4.3.0.beta1)

org.hibernate:hibernate-core MAVEN version 4.3.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - com.rexsl:rexsl-maven-plugin =0.4.9, =0.4.11 - org.hibernate:hibernate-c3p0 4.3.0.beta1 -...

br.com.flexait:flexa-core (>=0.0.1, <=0.0.2), de.taimos:spring-dao-hibernate (1.3) +17 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (4.2.7.sp1)

org.hibernate:hibernate-core MAVEN version 4.2.7.sp1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - br.com.flexait:flexa-core =0.0.1, =4.4.3.final, =4.4.3.final, =4.4.6.final -...

com.enioka.jqm:jqm-api-client-hibernate (1.1.6), com.enioka.jqm:jqm-engine (1.1.6) +24 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (4.2.11.final)

org.hibernate:hibernate-core MAVEN version 4.2.11.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - com.enioka.jqm:jqm-api-client-hibernate 1.1.6 - com.enioka.jqm:jqm-engine 1.1.6 -...

com.bardframework:bard-example (>=0.1.0, <=0.1.1), com.bardframework:bard-simple (>=0.1.0, <=0.1.1) +145 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (4.3.6.final)

org.hibernate:hibernate-core MAVEN version 4.3.6.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - com.bardframework:bard-example =0.1.0, =0.1.0, =0.1.0, =1.0.15-release, =1.0.15-release,...

com.axiastudio:zoefx-persistence (>=0.2.0, <=0.2.1), com.bardframework:bard-maven-plugin (0.3.0) +120 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (4.3.7.final)

org.hibernate:hibernate-core MAVEN version 4.3.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - com.axiastudio:zoefx-persistence =0.2.0, =0.2.0, =0.2.0, =5.0.3.7.4, =0.2.1, =0.2.1, =0.2.1,...

au.com.mountain-pass:hyperstate (>=1, <=9), biz.grundner.vaadin-in-spring:spring-vaadin (1.0) +512 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (4.3.11.final)

org.hibernate:hibernate-core MAVEN version 4.3.11.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - au.com.mountain-pass:hyperstate =1, =1.0.0, =1.0.8.0-release, =1.1.0-release, =1.1.0-release,...

org.hibernate:hibernate-annotations (3.5.0-cr-2), org.hibernate:hibernate-c3p0 (3.5.0-cr-2) +24 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (3.5.0-cr-2)

org.hibernate:hibernate-core MAVEN version 3.5.0-cr-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - org.hibernate:hibernate-annotations 3.5.0-cr-2 - org.hibernate:hibernate-c3p0 3.5.0-cr-2 -...

ch.semafor:gendas (>=1.0.1, <=1.1.2), com.cedarsoft.commons.db:genericdao (>=1.6.1, <=1.6.3) +218 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (3.3.0.sp1)

org.hibernate:hibernate-core MAVEN version 3.3.0.sp1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - ch.semafor:gendas =1.0.1, =1.6.1, =1.6.1, =1.4.0, =1.6.1, =1.3.4, =1.0.3, =1.0.0, =1.0.0, =0.7.9,...