CVE-2022-46337 Apache Derby: LDAP injection vulnerability in authenticator

🗓️ 20 Nov 2023 08:49:38Reported by apacheType

vulnrichment🔗 github.com👁 16 Views

LDAP injection vulnerability in Apache Derby can compromise data and execute malware. Upgrade recommended.

Reporter	Title	Published	Views	Family All 104
IBM Security Bulletins	Security Bulletin: IBM Tivoli Netcool Impact is vulnerable to remote attack due to Apache Derby (CVE-2022-46337)	1 Apr 202418:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for June 2024 - Multiple CVEs addressed	7 Aug 202405:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Application Performance Management	14 Feb 202408:43	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Derby affects IBM Cloud Pak System [CVE-2022-46337]	6 Feb 202419:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	13 Mar 202410:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Jazz for Service Management is vulnerable to Apache Derby security bypass [CVE-2022-46337]	2 Apr 202407:39	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Operations Analytics Predictive Insights.	27 Mar 202415:37	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Derby affects IBM Spectrum Control [CVE-2022-46337]	8 Jul 202409:21	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2 Warehouse container images.	7 Sep 202611:33	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for AIOps	31 Jan 202419:28	–	ibm

Source	Link
lists	www.lists.apache.org/thread/q23kvvtoohgzwybxpwozmvvk17rp0td3

03 Jan 2024 17:04Current

9.8Critical risk

Vulners AI Score9.8

EPSS0.01418

SSVC

ldap injection vulnerability apache derby security database corruption malware execution java upgrade