Apache Derby (Apache Software Foundation) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 9 known versions, newest CVE from 2023-11-20. Vendor: Apache Software Foundation.

CVEs of Apache Derby

• CVE-2022-46337 - CVSS 9.8 (critical), 2023-11-20: A cleverly devised username might bypass LDAP authentication checks. In LDAP-authenticated Derby installations, this could let an attacker fill up the disk by…
• CVE-2018-1313 - CVSS 5.3 (medium), 2018-05-07: In Apache Derby 10.3.1.4 to 10.14.1.0, a specially-crafted network packet can be used to request the Derby Network Server to boot a database whose location…
• CVE-2010-2232 - CVSS 7.5 (high), 2017-10-23: In Apache Derby 10.1.2.1, 10.2.2.0, 10.3.1.4, and 10.4.1.3, Export processing may allow an attacker to overwrite an existing file.