pkg:Maven/org.apache.derby:derby

All known vulnerabilities

• CRITICAL9.8CVE-2022-46337Apache Derby: LDAP injection vulnerability in authenticator
  >= 10.1.1.0, < 10.14.3
• CRITICAL9.1CVE-2015-1832Improper Restriction of XML External Entity Reference in Apace Derby
  from 0, < 10.12.1.1
• HIGH7.5CVE-2010-2232Improper Access Control in Apache Derby
  >= 10.1.2.1, < 10.4.2.0
• MEDIUM5.3Improper Access Control in Apache Derby
  >= 10.3.1.4, < 10.14.2.0
• —Use of Password Hash With Insufficient Computational Effort in Apache Derby
  from 0, < 10.6.1.0
• —Apache Derby SQL Injection
  from 0, < 10.2.1.6
• —Apache Derby exposes user and password attributes
  from 0, < 10.1.2.1