Vulnerability index

Browse CVEs

6 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

MEDIUM 6.4 CVE-2019-25448 OrientDB 3.0.17 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by creating user… Orientdb No fix yet Fix from $1,6002026-02-20 MEDIUM 6.1 CVE-2019-25449 OrientDB 3.0.17 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted JSON … Orientdb No fix yet Fix from $1,6002026-02-20 CRITICAL 9.8 CVE-2017-11467EPSS 73% OrientDB through 2.2.22 does not enforce privilege requirements during "where" or "fetchplan" or "order by" use, which allows remote attackers to exe… Orientdb after 2.2.22 Fix from $2,3002017-07-20 MEDIUM 6.1 CVE-2015-2918 The Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 does not properly restrict use of FRAME elements, whic… Orientdb Mitigation only Fix from $1,6002015-12-31 MEDIUM 5.9 CVE-2015-2913 server/network/protocol/http/OHttpSessionManager.java in the Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1… Orientdb Patch available Fix from $1,6002015-12-31 HIGH 8.8 CVE-2015-2912 The JSONP endpoint in the Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 does not properly restrict callb… Orientdb after 2.0.14 Fix from $1,9502015-12-31