Vulnerabilities > CVE-2020-25638

CVSS 7.4 - HIGH

Attack vector

NETWORK

Attack complexity

HIGH

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

NONE

network

high complexity

NVD

Published: 2020-12-02

Updated: 2024-11-21

Summary

A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SQL comments of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks. The highest threat from this vulnerability is to data confidentiality and integrity.

Vulnerable Configurations

Part	Description	Count
Application	Hibernate Hibernate Hibernate ORM 5.4.0 Hibernate Hibernate ORM 5.4.1 Hibernate Hibernate ORM 5.4.2 Hibernate Hibernate ORM 5.4.3 Hibernate Hibernate ORM 5.4.4 Hibernate Hibernate ORM 5.4.5 Hibernate Hibernate ORM 5.4.6 Hibernate Hibernate ORM 5.4.7 Hibernate Hibernate ORM 5.4.8 Hibernate Hibernate ORM 5.4.9 Hibernate Hibernate ORM 5.4.10 Hibernate Hibernate ORM 5.4.11 Hibernate Hibernate ORM 5.4.12 Hibernate Hibernate ORM 5.4.13 Hibernate Hibernate ORM 5.4.14 Hibernate Hibernate ORM 5.4.15 Hibernate Hibernate ORM 5.4.16 Hibernate Hibernate ORM 5.4.17 Hibernate Hibernate ORM 5.4.18 Hibernate Hibernate ORM 5.4.19 Hibernate Hibernate ORM 5.4.20 Hibernate Hibernate ORM 5.4.21 Hibernate Hibernate ORM 5.4.22 Hibernate Hibernate ORM 5.4.23 Hibernate Hibernate ORM 3.6.0 Hibernate Hibernate ORM 3.6.1 Hibernate Hibernate ORM 3.6.2 Hibernate Hibernate ORM 3.6.3 Hibernate Hibernate ORM 3.6.4 Hibernate Hibernate ORM 3.6.5 Hibernate Hibernate ORM 3.6.6 Hibernate Hibernate ORM 3.6.7 Hibernate Hibernate ORM 3.6.8 Hibernate Hibernate ORM 3.6.9 Hibernate Hibernate ORM 3.6.10 Hibernate Hibernate ORM 4.0.0 Hibernate Hibernate ORM 4.0.1 Hibernate Hibernate ORM 4.1.0 Hibernate Hibernate ORM 4.1.1 Hibernate Hibernate ORM 4.1.2 Hibernate Hibernate ORM 4.1.3 Hibernate Hibernate ORM 4.1.4 Hibernate Hibernate ORM 4.1.5 Hibernate Hibernate ORM 4.1.6 Hibernate Hibernate ORM 4.1.7 Hibernate Hibernate ORM 4.1.8 Hibernate Hibernate ORM 4.1.9 Hibernate Hibernate ORM 4.1.10 Hibernate Hibernate ORM 4.1.11 Hibernate Hibernate ORM 4.1.12 Hibernate Hibernate ORM 4.2.0 Hibernate Hibernate ORM 4.2.1 Hibernate Hibernate ORM 4.2.2 Hibernate Hibernate ORM 4.2.3 Hibernate Hibernate ORM 4.2.4 Hibernate Hibernate ORM 4.2.5 Hibernate Hibernate ORM 4.2.6 Hibernate Hibernate ORM 4.2.7 Hibernate Hibernate ORM 4.2.8 Hibernate Hibernate ORM 4.2.9 Hibernate Hibernate ORM 4.2.10 Hibernate Hibernate ORM 4.2.11 Hibernate Hibernate ORM 4.2.12 Hibernate Hibernate ORM 4.2.13 Hibernate Hibernate ORM 4.2.14 Hibernate Hibernate ORM 4.2.15 Hibernate Hibernate ORM 4.2.16 Hibernate Hibernate ORM 4.2.17 Hibernate Hibernate ORM 4.2.18 Hibernate Hibernate ORM 4.2.19 Hibernate Hibernate ORM 4.2.20 Hibernate Hibernate ORM 4.2.21 Hibernate Hibernate ORM 4.2.22 Hibernate Hibernate ORM 4.2.23 Hibernate Hibernate ORM 4.2.24 Hibernate Hibernate ORM 4.2.25 Hibernate Hibernate ORM 4.2.26 Hibernate Hibernate ORM 4.2.27 Hibernate Hibernate ORM 4.3.0 Hibernate Hibernate ORM 4.3.1 Hibernate Hibernate ORM 4.3.2 Hibernate Hibernate ORM 4.3.3 Hibernate Hibernate ORM 4.3.4 Hibernate Hibernate ORM 4.3.5 Hibernate Hibernate ORM 4.3.6 Hibernate Hibernate ORM 4.3.7 Hibernate Hibernate ORM 4.3.8 Hibernate Hibernate ORM 4.3.9 Hibernate Hibernate ORM 4.3.10 Hibernate Hibernate ORM 4.3.11 Hibernate Hibernate ORM 5.0.0 Hibernate Hibernate ORM 5.0.1 Hibernate Hibernate ORM 5.0.2 Hibernate Hibernate ORM 5.0.3 Hibernate Hibernate ORM 5.0.4 Hibernate Hibernate ORM 5.0.5 Hibernate Hibernate ORM 5.0.6 Hibernate Hibernate ORM 5.0.7 Hibernate Hibernate ORM 5.0.8 Hibernate Hibernate ORM 5.0.9 Hibernate Hibernate ORM 5.0.10 Hibernate Hibernate ORM 5.0.11 Hibernate Hibernate ORM 5.0.12 Hibernate Hibernate ORM 5.0.13 Hibernate Hibernate ORM 5.0.14 Hibernate Hibernate ORM 5.0.15 Hibernate Hibernate ORM 5.0.16 Hibernate Hibernate ORM 5.1.0 Hibernate Hibernate ORM 5.1.1 Hibernate Hibernate ORM 5.1.2 Hibernate Hibernate ORM 5.1.3 Hibernate Hibernate ORM 5.1.4 Hibernate Hibernate ORM 5.1.5 Hibernate Hibernate ORM 5.1.6 Hibernate Hibernate ORM 5.1.7 Hibernate Hibernate ORM 5.1.8 Hibernate Hibernate ORM 5.1.9 Hibernate Hibernate ORM 5.1.10 Hibernate Hibernate ORM 5.1.11 Hibernate Hibernate ORM 5.1.12 Hibernate Hibernate ORM 5.1.13 Hibernate Hibernate ORM 5.1.14 Hibernate Hibernate ORM 5.1.15 Hibernate Hibernate ORM 5.1.16 Hibernate Hibernate ORM 5.1.17 Hibernate Hibernate ORM 5.2.0 Hibernate Hibernate ORM 5.2.1 Hibernate Hibernate ORM 5.2.2 Hibernate Hibernate ORM 5.2.3 Hibernate Hibernate ORM 5.2.4 Hibernate Hibernate ORM 5.2.5 Hibernate Hibernate ORM 5.2.6 Hibernate Hibernate ORM 5.2.7 Hibernate Hibernate ORM 5.2.8 Hibernate Hibernate ORM 5.2.9 Hibernate Hibernate ORM 5.2.10 Hibernate Hibernate ORM 5.2.11 Hibernate Hibernate ORM 5.2.12 Hibernate Hibernate ORM 5.2.13 Hibernate Hibernate ORM 5.2.14 Hibernate Hibernate ORM 5.2.15 Hibernate Hibernate ORM 5.2.16 Hibernate Hibernate ORM 5.2.17 Hibernate Hibernate ORM 5.2.18 Hibernate Hibernate ORM 5.3.0 Hibernate Hibernate ORM 5.3.1 Hibernate Hibernate ORM 5.3.2 Hibernate Hibernate ORM 5.3.3 Hibernate Hibernate ORM 5.3.4 Hibernate Hibernate ORM 5.3.5 Hibernate Hibernate ORM 5.3.6 Hibernate Hibernate ORM 5.3.7 Hibernate Hibernate ORM 5.3.8 Hibernate Hibernate ORM 5.3.9 Hibernate Hibernate ORM 5.3.10 Hibernate Hibernate ORM 5.3.11 Hibernate Hibernate ORM 5.3.12 Hibernate Hibernate ORM 5.3.13 Hibernate Hibernate ORM 5.3.14 Hibernate Hibernate ORM 5.3.15 Hibernate Hibernate ORM 5.3.16 Hibernate Hibernate ORM 5.3.17 Hibernate Hibernate ORM 5.3.18 Hibernate Hibernate ORM 5.3.19	209
Application	Quarkus Quarkus Quarkus 0.0.1 Quarkus Quarkus 0.1.0 Quarkus Quarkus 0.2.0 Quarkus Quarkus 0.3.0 Quarkus Quarkus 0.4.0 Quarkus Quarkus 0.5.0 Quarkus Quarkus 0.6.0 Quarkus Quarkus 0.7.0 Quarkus Quarkus 0.8.0 Quarkus Quarkus 0.9.0 Quarkus Quarkus 0.9.1 Quarkus Quarkus 0.10.0 Quarkus Quarkus 0.11.0 Quarkus Quarkus 0.12.0 Quarkus Quarkus 0.13.0 Quarkus Quarkus 0.13.1 Quarkus Quarkus 0.13.2 Quarkus Quarkus 0.13.3 Quarkus Quarkus 0.14.0 Quarkus Quarkus 0.15.0 Quarkus Quarkus 0.16.0 Quarkus Quarkus 0.16.1 Quarkus Quarkus 0.17.0 Quarkus Quarkus 0.18.0 Quarkus Quarkus 0.19.0 Quarkus Quarkus 0.19.1 Quarkus Quarkus 0.20.0 Quarkus Quarkus 0.21.0 Quarkus Quarkus 0.21.1 Quarkus Quarkus 0.21.2 Quarkus Quarkus 0.22.0 Quarkus Quarkus 0.23.0 Quarkus Quarkus 0.23.1 Quarkus Quarkus 0.23.2 Quarkus Quarkus 0.24.0 Quarkus Quarkus 0.25.0 Quarkus Quarkus 0.26.0 Quarkus Quarkus 0.26.1 Quarkus Quarkus 0.27.0 Quarkus Quarkus 0.28.0 Quarkus Quarkus 0.28.1 Quarkus Quarkus 1.0.0 Quarkus Quarkus 1.0.1 Quarkus Quarkus 1.1.0 Quarkus Quarkus 1.1.1 Quarkus Quarkus 1.2.0 Quarkus Quarkus 1.2.1 Quarkus Quarkus 1.3.0 Quarkus Quarkus 1.3.1 Quarkus Quarkus 1.3.2 Quarkus Quarkus 1.3.3 Quarkus Quarkus 1.3.4 Quarkus Quarkus 1.4.0 Quarkus Quarkus 1.4.1 Quarkus Quarkus 1.4.2 Quarkus Quarkus 1.5.0 Quarkus Quarkus 1.5.1 Quarkus Quarkus 1.5.2 Quarkus Quarkus 1.6.0 Quarkus Quarkus 1.6.1 Quarkus Quarkus 1.7.0 Quarkus Quarkus 1.7.1 Quarkus Quarkus 1.7.2 Quarkus Quarkus 1.7.3 Quarkus Quarkus 1.7.4 Quarkus Quarkus 1.7.5 Quarkus Quarkus 1.7.6 Quarkus Quarkus 1.8.0 Quarkus Quarkus 1.8.1 Quarkus Quarkus 1.8.2 Quarkus Quarkus 1.8.3 Quarkus Quarkus 1.9.0 Quarkus Quarkus 1.9.1 Quarkus Quarkus 1.9.2	102
Application	Oracle Oracle Retail Customer Management AND Segmentation Foundation 19.0 Oracle Communications Cloud Native Core Console 1.9.0	2
OS	Debian Debian Debian Linux 9.0 Debian Debian Linux 10.0	2

Vulnerabilities > CVE-2020-25638 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2020-25638"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2020-25638