Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2014-0171

Odata4j: XML eXternal Entity (XXE) flaw

XML external entity (XXE) vulnerability in StaxXMLFactoryProvider2 in Odata4j, as used in Red Hat JBoss Data Virtualization before 6.0.0 patch 4, allows remote attackers to read arbitrary files via a crafted request to a REST endpoint.

CVSS 2.0 · 5.0 Medium EPSS 2.1% KEV · Not listed
Vendors
Odata4j Project Redhat
Products
Odata4j Jboss Data Virtualization
CVE-2016-11024

odata4j: allows ExecuteJPQLQueryCommand.java SQL injection

odata4j 0.7.0 allows ExecuteJPQLQueryCommand.java SQL injection. NOTE: this product is apparently discontinued.

CVSS 3.1 · 9.8 Critical EPSS 1.4% KEV · Not listed
Vendors
Odata4j Project
Products
Odata4j
CVE-2016-11023

odata4j: allows ExecuteCountQueryCommand.java SQL injection

odata4j 0.7.0 allows ExecuteCountQueryCommand.java SQL injection. NOTE: this product is apparently discontinued.

CVSS 3.1 · 9.8 Critical EPSS 1.4% KEV · Not listed
Vendors
Odata4j Project
Products
Odata4j