jena_sdb vulnerabilities

1 known vulnerability in jena_sdb from Apache. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Apache Jena SDB: Deserialization of Untrusted Data

  CVE-2022-45136Nov 14, 2022ApacheEPSS 1.84%

  Apache Jena SDB 3.17.0 and earlier is vulnerable to a JDBC Deserialisation attack if the attacker is able to control the JDBC URL used or cause the underlying database server to return malicious data. The mySQL JDBC driver in particular is known to be vulnerab