Vulnerabilities > Apache > Jena SDB

DATE CVE VULNERABILITY TITLE RISK
2022-11-14 CVE-2022-45136 Deserialization of Untrusted Data vulnerability in Apache Jena SDB 3.17.0
Apache Jena SDB 3.17.0 and earlier is vulnerable to a JDBC Deserialisation attack if the attacker is able to control the JDBC URL used or cause the underlying database server to return malicious data.
network
low complexity
apache CWE-502
critical
9.8