Vulnerabilities > Apache > Derby > 10.12.1

DATE CVE VULNERABILITY TITLE RISK
2023-11-20 CVE-2022-46337 Injection vulnerability in Apache Derby
A cleverly devised username might bypass LDAP authentication checks.
network
low complexity
apache CWE-74
critical
 9.8
9.8
2018-05-07 CVE-2018-1313 In Apache Derby 10.3.1.4 to 10.14.1.0, a specially-crafted network packet can be used to request the Derby Network Server to boot a database whose location and contents are under the user's control.
network
high complexity
apache oracle
5.3
5.3