Apache Software Foundation Apache Derby vulnerabilities
2 known vulnerabilities affecting apache_software_foundation/apache_derby.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH1
Vulnerabilities
Page 1 of 1
CVE-2022-46337P2CRITICALCVSS 9.8≥ 10.1.1.0, ≤ 10.1.3.1≥ 10.2.1.6, ≤ 10.2.2.0+14 more2023-11-20
CVE-2022-46337 [CRITICAL] CWE-74 CVE-2022-46337: A cleverly devised username might bypass LDAP authentication checks. In LDAP-authenticated Derby in
A cleverly devised username might bypass LDAP authentication checks. In
LDAP-authenticated Derby installations, this could let an attacker fill
up the disk by creating junk Derby databases. In LDAP-authenticated
Derby installations, this could also allow the attacker to execute
malware which was visible to and executable by the account which booted
nvd
CVE-2010-2232P3HIGHCVSS 7.5v10.1.2.1, 10.2.2.0, 10.3.1.4, 10.4.1.32017-10-23
CVE-2010-2232 [HIGH] CWE-284 CVE-2010-2232: In Apache Derby 10.1.2.1, 10.2.2.0, 10.3.1.4, and 10.4.1.3, Export processing may allow an attacker
In Apache Derby 10.1.2.1, 10.2.2.0, 10.3.1.4, and 10.4.1.3, Export processing may allow an attacker to overwrite an existing file.
nvd