Lucene search
Veracode Vulnerability DatabaseVERACODE:4621HistoryJul 20, 2017 - 5:29 p.m.
Remote Code Execution (RCE)
2017-07-2017:29:16
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
EPSS
0.327
Percentile
97.1%
OrientDB Core is vulnerable to remote code execution (RCE) attacks. Permissions are not enforced on a user executing a statement to the ORole structure containing a where, fetchplan or order by statement. By executing a groovy function where the groovy wrapper doesn’t have a sandbox, any system command can be executed.
Related
exploitpack
exploitpack
OrientDB - Code Execution
2017-07-13 00:00:00
prion
prion
Design/Logic Flaw
2017-07-20 00:29:00
cvelist
cvelist
CVE-2017-11467
2017-07-20 00:00:00
metasploit
metasploit
OrientDB 2.2.x Remote Code Execution
2017-07-18 15:53:44
osv
osv
exploitdb
exploitdb
OrientDB - Code Execution
2017-07-13 00:00:00
checkpoint_advisories
checkpoint_advisories
OrientDB Groovy Wrapper Remote Code Execution (CVE-2017-11467)
2018-02-04 00:00:00
nvd
nvd
CVE-2017-11467
2017-07-20 00:29:00
cve
cve
CVE-2017-11467
2017-07-20 00:29:00
github
github
openvas
openvas
OrientDB Server 2.2.x <= 2.2.22 RCE Vulnerability
2017-10-12 00:00:00