ai.grakn:grakn-orientdb-factory (>=0.7.0, <=0.10.0), ai.grakn:orientdb-factory (>=0.11.0, <=0.16.0) +106 more potentially affected by CVE-2017-11467 via com.orientechnologies:orientdb-core (>=2.0-m1, <=2.2.22)

com.orientechnologies:orientdb-core MAVEN version =2.0-m1, =0.7.0, =0.11.0, =0.0.1, =0.8, =0.1, =0.1, =0.4, =3.0.0.m1, =0.12, =0.12, =2.0-m1, =2.0.2, =2.0-m1, =2.0-m1, =2.2.0-beta and more Source cves: CVE-2017-11467 Source advisory: OSV:GHSA-XM6R-4466-MR74...

com.orientechnologies:orientdb (1.5.0), com.orientechnologies:orientdb-client (1.5.0) +13 more potentially affected by CVE-2017-11467 via com.orientechnologies:orientdb-core (1.5.0)

com.orientechnologies:orientdb-core MAVEN version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-core and may be impacted: - com.orientechnologies:orientdb 1.5.0 - com.orientechnologies:orientdb-client 1.5.0 -...

com.orientechnologies:orientdb-client (1.6.5), com.orientechnologies:orientdb-community (1.6.5) +6 more potentially affected by CVE-2017-11467 via com.orientechnologies:orientdb-core (1.6.5)

com.orientechnologies:orientdb-core MAVEN version 1.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-core and may be impacted: - com.orientechnologies:orientdb-client 1.6.5 - com.orientechnologies:orientdb-community...

com.orientechnologies:orientdb-client (1.7-rc2), com.orientechnologies:orientdb-distributed (1.7-rc2) +5 more potentially affected by CVE-2017-11467 via com.orientechnologies:orientdb-core (1.7-rc2)

com.orientechnologies:orientdb-core MAVEN version 1.7-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-core and may be impacted: - com.orientechnologies:orientdb-client 1.7-rc2 -...

com.orientechnologies:orientdb (1.0.1), com.orientechnologies:orientdb-client (1.0.1) +6 more potentially affected by CVE-2017-11467 via com.orientechnologies:orientdb-core (1.0.1)

com.orientechnologies:orientdb-core MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-core and may be impacted: - com.orientechnologies:orientdb 1.0.1 - com.orientechnologies:orientdb-client 1.0.1 -...

CVE-2017-11467

creationtimestamp| type| source ---|---|--- 2018-02-02 15:26:37+00:00| exploited| https://t.me/SecLabNews/1444 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/orientdbexec.rb 2020-10-09 15:17:37+00:00| seen|...

VulnCheck KEV: CVE-2017-11467

OrientDB through 2.2.22 does not enforce privilege requirements during "where" or "fetchplan" or "order by" use, which allows remote attackers to execute arbitrary OS commands via a crafted request...

CVE-2017-11467

OrientDB (through version 2.2.22 ) is vulnerable to Remote Code Execution (RCE) because it fails to enforce privilege requirements during the use of "where" , "fetchplan" , or "order by" clauses. A remote attacker can exploit this deficiency by sending a specially-crafted request to execute arbit...

OrientDB - Code Execution

OrientDB - Code Execution Vulnerability Summary The following advisory reports a vulnerability in OrientDB which allows users of the product to cause it to execute code. OrientDB is a Distributed Graph Database engine with the flexibility of a Document Database all in one product. The first and...

OrientDB 2.2.x Remote Code Execution

This module leverages a privilege escalation on OrientDB to execute unsandboxed OS commands. All versions from 2.2.2 up to 2.2.22 should be vulnerable. Module Options msf use exploit/multi/http/orientdb/exec msf undefinedexec show actions ...actions... msf undefinedexec set ACTION msf undefinedex...

OrientDB - Code Execution

Vulnerability Summary The following advisory reports a vulnerability in OrientDB which allows users of the product to cause it to execute code. OrientDB is a Distributed Graph Database engine with the flexibility of a Document Database all in one product. The first and best scalable,...