Odata4J Project vulnerabilities

3 vulnerabilities

Known vulnerabilities in Odata4J Project products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.

Products

1
9.8CVE-2016-11024org.odata4jodata4j-core+3
EPSS score
1.41%
odata4j 0.7.0 allows ExecuteJPQLQueryCommand.java SQL injection. NOTE: this product is apparently discontinued.9.8CVE-2016-11023org.odata4jodata4j-core+3
EPSS score
1.41%
odata4j 0.7.0 allows ExecuteCountQueryCommand.java SQL injection. NOTE: this product is apparently discontinued.5CVE-2014-0171odata4j_projectodata4j+1
EPSS score
2.11%
XML external entity (XXE) vulnerability in StaxXMLFactoryProvider2 in Odata4j, as used in Red Hat JBoss Data Virtualization before 6.0.0 patch 4, allows remote attackers to read arbitrary files via a crafted request to a REST endpoint.