Derby vulnerabilities

1 known vulnerability in Derby from Apache. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Apache Derby: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2022-46337Nov 20, 2023ApacheEPSS 1.42%

  A cleverly devised username might bypass LDAP authentication checks. In LDAP-authenticated Derby installations, this could let an attacker fill up the disk by creating junk Derby databases. In LDAP-authenticated Derby installations, this could also allow the a