← Back

Hibernate Orm

hibernate_orm

Vendor: Hibernate • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-25638
4Debian
HibernateOracle+1 more
5Communications Cloud Native Core Console
Debian LinuxHibernate Orm+2 more
Jun 17, 2026
Dec 2, 2020
N/A· v4
7.4 HIGH· v3
5.8 MEDIUM· v2
A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SQL comments...Show more
A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SQL comments of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks. The highest threat from this vulnerability is to data confidentiality and integrity.Show less
CVE-2019-14900
3Hibernate
QuarkusRedhat
10Build Of Quarkus
Decision ManagerFuse+7 more
Jun 17, 2026
Jul 6, 2020
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or G...Show more
A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks.Show less