Odata4J Project Odata4J vulnerabilities

3 vulnerabilities

Known vulnerabilities in Odata4J Project Odata4J, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2016-11024org.odata4jodata4j-core+3
EPSS score
1.41%
odata4j 0.7.0 allows ExecuteJPQLQueryCommand.java SQL injection. NOTE: this product is apparently discontinued.9.8CVE-2016-11023org.odata4jodata4j-core+3
EPSS score
1.41%
odata4j 0.7.0 allows ExecuteCountQueryCommand.java SQL injection. NOTE: this product is apparently discontinued.5CVE-2014-0171odata4j_projectodata4j+1
EPSS score
2.11%
XML external entity (XXE) vulnerability in StaxXMLFactoryProvider2 in Odata4j, as used in Red Hat JBoss Data Virtualization before 6.0.0 patch 4, allows remote attackers to read arbitrary files via a crafted request to a REST endpoint.