com.orientechnologies:orientdb-community (1.6.6), com.orientechnologies:orientdb-distributed (1.6.6) +1 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.6.6)

com.orientechnologies:orientdb-server MAVEN version 1.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-community 1.6.6 -...

com.orientechnologies:orientdb-distributed (1.7-rc1), com.orientechnologies:orientdb-graphdb (1.7-rc1) potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.7-rc1)

com.orientechnologies:orientdb-server MAVEN version 1.7-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-distributed 1.7-rc1 -...

com.orientechnologies:orientdb-distributed (1.7-rc2), com.orientechnologies:orientdb-graphdb (1.7-rc2) potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.7-rc2)

com.orientechnologies:orientdb-server MAVEN version 1.7-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-distributed 1.7-rc2 -...

com.orientechnologies:orientdb (1.0rc9) potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.0rc9)

com.orientechnologies:orientdb-server MAVEN version 1.0rc9 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb 1.0rc9 Source cves: CVE-2015-2913 Source advisory:...

com.orientechnologies:orientdb (1.0) potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.0)

com.orientechnologies:orientdb-server MAVEN version 1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb 1.0 Source cves: CVE-2015-2913 Source advisory:...

com.orientechnologies:orientdb (1.0.1) potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.0.1)

com.orientechnologies:orientdb-server MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb 1.0.1 Source cves: CVE-2015-2913 Source advisory:...

com.orientechnologies:orientdb (1.1.0), com.orientechnologies:orientdb-distributed (1.1.0) +2 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.1.0)

com.orientechnologies:orientdb-server MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb 1.1.0 - com.orientechnologies:orientdb-distributed 1.1...

com.orientechnologies:orientdb (1.2.0), com.orientechnologies:orientdb-distributed (1.2.0) +1 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.2.0)

com.orientechnologies:orientdb-server MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb 1.2.0 - com.orientechnologies:orientdb-distributed 1.2...

com.orientechnologies:orientdb (1.4.1), com.orientechnologies:orientdb-distributed (1.4.1) potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.4.1)

com.orientechnologies:orientdb-server MAVEN version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb 1.4.1 - com.orientechnologies:orientdb-distributed 1.4...

com.orientechnologies:orientdb (1.5.0), com.orientechnologies:orientdb-distributed (1.5.0) +1 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.5.0)

com.orientechnologies:orientdb-server MAVEN version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb 1.5.0 - com.orientechnologies:orientdb-distributed 1.5...

com.orientechnologies:orientdb-distributed (1.6), com.orientechnologies:orientdb-graphdb (1.6) +1 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.6)

com.orientechnologies:orientdb-server MAVEN version 1.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-distributed 1.6 - com.orientechnologies:orientdb-graphdb...

com.orientechnologies:orientdb-distributed (1.6.4), com.orientechnologies:orientdb-graphdb (1.6.4) potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.6.4)

com.orientechnologies:orientdb-server MAVEN version 1.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-distributed 1.6.4 -...

com.orientechnologies:orientdb-community (1.6.5), com.orientechnologies:orientdb-distributed (1.6.5) +1 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.6.5)

com.orientechnologies:orientdb-server MAVEN version 1.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-community 1.6.5 -...

com.orientechnologies:orientdb-community (>=2.0.2, <=2.0.14), com.orientechnologies:orientdb-distributed (>=2.0-m1, <=2.0.14) +20 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (>=2.0-m1, <=2.0.14)

com.orientechnologies:orientdb-server MAVEN version =2.0-m1, =2.0.2, =2.0-m1, =2.0-m3, =2.0-m1, =2.0-m3, =2.0-m1, =2.0.14 - io.cobweb:cobweb 1.0 - org.ops4j.orient.samples:orient-sample1 0.3.0 - org.ops4j.orient.samples:orient-sample2 0.3.0 - org.ops4j.orient:orient-ra 0.3.0 -...

com.orientechnologies:orientdb-community (>=2.0.2, <=2.0.14), com.orientechnologies:orientdb-distributed (>=2.0-m1, <=2.0.14) +20 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (>=2.0-m1, <=2.0.14)

com.orientechnologies:orientdb-server MAVEN version =2.0-m1, =2.0.2, =2.0-m1, =2.0-m3, =2.0-m1, =2.0-m3, =2.0-m1, =2.0.14 - io.cobweb:cobweb 1.0 - org.ops4j.orient.samples:orient-sample1 0.3.0 - org.ops4j.orient.samples:orient-sample2 0.3.0 - org.ops4j.orient:orient-ra 0.3.0 -...

com.orientechnologies:orientdb-community (1.7.4), com.orientechnologies:orientdb-distributed (1.7.4) +2 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.7.4)

com.orientechnologies:orientdb-server MAVEN version 1.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-community 1.7.4 -...

com.orientechnologies:orientdb-community (2.1.0), com.orientechnologies:orientdb-distributed (2.1.0) +4 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (2.1.0)

com.orientechnologies:orientdb-server MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-community 2.1.0 -...

com.orientechnologies:orientdb-community (2.1.0), com.orientechnologies:orientdb-distributed (2.1.0) +4 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (2.1.0)

com.orientechnologies:orientdb-server MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-community 2.1.0 -...

OrientDB-Server vulnerable to Cross-Site Request Forgery

The JSONP endpoint in the Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 does not properly restrict callback values, which allows remote attackers to conduct cross-site request forgery CSRF attacks, and obtain sensitive information, via a crafted HTTP...

com.orientechnologies:orientdb (1.0.1), com.orientechnologies:orientdb-client (1.0.1) +6 more potentially affected by CVE-2017-11467 via com.orientechnologies:orientdb-core (1.0.1)

com.orientechnologies:orientdb-core MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-core and may be impacted: - com.orientechnologies:orientdb 1.0.1 - com.orientechnologies:orientdb-client 1.0.1 -...