Apache Software Foundation Apache Derby
3 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-46337 | 10.1.1.0 – 10.1.3.1 ; 10.2.1.6 – 10.2.2.0 ; 10.3.1.4 – 10.3.3.0 ; … | Apache Derby: LDAP injection vulnerability in authenticator | CRITICAL 9.8 | 1.4 % | ||
| CVE-2018-1313 | 10.3.1.4 to 10.14.1.0 | In Apache Derby 10.3.1.4 to 10.14.1.0, a specially-crafted network packet can be used to request the Derby Network Server to boot a database | MEDIUM 5.3 | 4.6 % | ||
| CVE-2010-2232 | 10.1.2.1, 10.2.2.0, 10.3.1.4, 10.4.1.3 | In Apache Derby 10.1.2.1, 10.2.2.0, 10.3.1.4, and 10.4.1.3, Export processing may allow an attacker to overwrite an existing file. | HIGH 7.5 | 3.8 % |