RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.1.11 on RHEL 7 (RHSA-2025:9582)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:9582 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release o...

Security Bulletin: IBM Security Verify Governance is vulnerable to SQL injection due to use of Hibernate ORM (CVE-2020-25638)

Summary IBM Security Verify Governance uses Hibernate ORM which is vulnerable to SQL injection, caused by misconfiguration for hibernate.usesqlcomments. A remote attacker could send specially-crafted SQL statements to manipulate data in the back-end databaseCVE-2020-25638. The affected jar was...

org.hibernate:hibernate-annotations (3.4.0.cr2), org.hibernate:hibernate-c3p0 (3.3.0.cr2) +12 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (3.3.0.cr2)

org.hibernate:hibernate-core MAVEN version 3.3.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - org.hibernate:hibernate-annotations 3.4.0.cr2 - org.hibernate:hibernate-c3p0 3.3.0.cr2 -...

org.hibernate:hibernate-annotations (3.5.0.beta-1), org.hibernate:hibernate-c3p0 (3.5.0.beta-1) +13 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (3.5.0.beta-1)

org.hibernate:hibernate-core MAVEN version 3.5.0.beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - org.hibernate:hibernate-annotations 3.5.0.beta-1 - org.hibernate:hibernate-c3p0 3.5.0.beta-1 -...

org.hibernate:hibernate-annotations (3.5.0-cr-1), org.hibernate:hibernate-c3p0 (3.5.0-cr-1) +24 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (3.5.0-cr-1)

org.hibernate:hibernate-core MAVEN version 3.5.0-cr-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - org.hibernate:hibernate-annotations 3.5.0-cr-1 - org.hibernate:hibernate-c3p0 3.5.0-cr-1 -...

org.hibernate:hibernate-annotations (3.5.0-cr-2), org.hibernate:hibernate-c3p0 (3.5.0-cr-2) +24 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (3.5.0-cr-2)

org.hibernate:hibernate-core MAVEN version 3.5.0-cr-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - org.hibernate:hibernate-annotations 3.5.0-cr-2 - org.hibernate:hibernate-c3p0 3.5.0-cr-2 -...

br.net.woodstock.rockframework:rockframework-domain (>=1.2.1, <=1.2.2), com.googlecode:jpa-scoped-manager (1.1) +42 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (3.5.0-final)

org.hibernate:hibernate-core MAVEN version 3.5.0-final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - br.net.woodstock.rockframework:rockframework-domain =1.2.1, =1.9.3, =3.0-rc1, =3.1.18.release,...

com.github.paginationspring:pagination (1.0.3), com.github.wwadge:hbnpojogen-persistence (>=1.4.32, <=1.5.11) +25 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (3.5.2-final)

org.hibernate:hibernate-core MAVEN version 3.5.2-final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - com.github.paginationspring:pagination 1.0.3 - com.github.wwadge:hbnpojogen-persistence =1.4.32,...

com.cedarsoft.business:db (>=1.0.1, <=1.0.2), com.cedarsoft.db:genericdao (>=1.0.0, <=1.0.1) +72 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (3.5.4-final)

org.hibernate:hibernate-core MAVEN version 3.5.4-final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - com.cedarsoft.business:db =1.0.1, =1.0.0, =1.0.0, =3.4.3, =3.4.3, =2.0-beta2, =0.8.0, =0.8.0,...

br.com.caelum.stella:caelum-stella-hibernate-user-types (>=2.0-beta1, <=2.1.1), br.com.caelum.stella:hibernate-persistence-example (>=2.0-beta1, <=2.2.2) +25 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (3.5.5-final)

org.hibernate:hibernate-core MAVEN version 3.5.5-final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - br.com.caelum.stella:caelum-stella-hibernate-user-types =2.0-beta1, =2.0-beta1, =2.0-beta1, =1.0,...

br.net.woodstock.rockframework:rockframework-domain (>=1.2.4, <=3.0.1), br.net.woodstock.rockframework:rockframework-persistence (>=2.0.0, <=2.0.8) +47 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (3.6.7.final)

org.hibernate:hibernate-core MAVEN version 3.6.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - br.net.woodstock.rockframework:rockframework-domain =1.2.4, =2.0.0, =1.2.4, =0.3, =3.4.1.12.gson,...

org.hibernate:hibernate-c3p0 (4.0.0.cr4), org.hibernate:hibernate-ehcache (4.0.0.cr4) +8 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (4.0.0.cr4)

org.hibernate:hibernate-core MAVEN version 4.0.0.cr4 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - org.hibernate:hibernate-c3p0 4.0.0.cr4 - org.hibernate:hibernate-ehcache 4.0.0.cr4 -...

com.fasterxml.jackson.datatype:jackson-datatype-hibernate4 (>=2.0.0-rc2, <=2.11.4), com.github.stephanarts:cas-server-integration-zeromq (>=0.0.1, <=0.0.8) +76 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (4.1.0.final)

org.hibernate:hibernate-core MAVEN version 4.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - com.fasterxml.jackson.datatype:jackson-datatype-hibernate4 =2.0.0-rc2, =0.0.1, =3.0-rc1, =1.0,...

com.sangupta:jerry (>=0.1.0, <=0.5.0), org.debux.webmotion:webmotion-extra-all (>=2.3.2, <=2.5.3) +25 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (4.1.1.final)

org.hibernate:hibernate-core MAVEN version 4.1.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - com.sangupta:jerry =0.1.0, =2.3.2, =2.3.2, =2.3.2, =4.1.0.cr3, =4.1.0.cr3, =4.1.0.cr3, =2.1.0.cr1...

at.ipsquare:ipsquare-commons-hibernate (>=1.0.1, <=1.0.2), at.ipsquare:ipsquare-commons-servlet (1.0.2) +44 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (4.1.4.final)

org.hibernate:hibernate-core MAVEN version 4.1.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - at.ipsquare:ipsquare-commons-hibernate =1.0.1, =1.0.1, =3.5.1, =0.1.7, =2.7.1, =1.4.3, =1.4.3,...

com.bstek.uflo:uflo-console (>=2.0.0, <=2.0.1), com.bstek.uflo:uflo-core (>=2.0.0, <=2.0.1) +21 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (3.6.5.final)

org.hibernate:hibernate-core MAVEN version 3.6.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - com.bstek.uflo:uflo-console =2.0.0, =2.0.0, =2.0.0, =2.0.1 -...

net.sf.ahtutils:ahtutils-util (0.2.1), org.hibernate:hibernate-c3p0 (4.0.0.beta1) +6 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (4.0.0.beta1)

org.hibernate:hibernate-core MAVEN version 4.0.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - net.sf.ahtutils:ahtutils-util 0.2.1 - org.hibernate:hibernate-c3p0 4.0.0.beta1 -...

org.hibernate:hibernate-c3p0 (4.0.0.beta4), org.hibernate:hibernate-ehcache (4.0.0.beta4) +5 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (4.0.0.beta4)

org.hibernate:hibernate-core MAVEN version 4.0.0.beta4 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - org.hibernate:hibernate-c3p0 4.0.0.beta4 - org.hibernate:hibernate-ehcache 4.0.0.beta4 -...

org.hibernate:hibernate-c3p0 (4.0.0.cr3), org.hibernate:hibernate-ehcache (4.0.0.cr3) +8 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (4.0.0.cr3)

org.hibernate:hibernate-core MAVEN version 4.0.0.cr3 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - org.hibernate:hibernate-c3p0 4.0.0.cr3 - org.hibernate:hibernate-ehcache 4.0.0.cr3 -...

com.github.youribonnaffe.gradle.format:com.github.youribonnaffe.gradle.format.gradle.plugin (1.2), de.tudarmstadt.ukp.wikipedia:de.tudarmstadt.ukp.wikipedia.api (>=0.9.0, <=0.9.1) +21 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (4.0.0.final)

org.hibernate:hibernate-core MAVEN version 4.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - com.github.youribonnaffe.gradle.format:com.github.youribonnaffe.gradle.format.gradle.plugin 1.2 -...