Known Vulnerabilities for Hibernate Orm by Hibernate
Listed below are 2 of the newest known vulnerabilities associated with "Hibernate Orm" by "Hibernate".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-75334 json | The report module in the backend of smart-web2 v1.3.1 is vulnerable to arbitrary SQL execution. The sqlResource.sql parameter... | Not Provided | 2026-08-26 | 2026-09-01 |
| CVE-2026-40015 json | An attacker that has valid credentials can open many connections to the imap-hibernate service and send invalid commands, whi... | Not Provided | 2026-08-28 | 2026-08-28 |
| CVE-2026-13337 json | CWE-564: SQL Injection: Hibernate vulnerability exists that could allow the injection of a malicious HQL query in the NetBotz... | Not Provided | 2026-09-01 | 2026-09-01 |
| CVE-2026-0603 json | A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability... | Not Provided | 2026-01-23 | 2026-08-19 |
| CVE-2025-39936 json | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Always pass in an error pointer to __sev_p... | Not Provided | 2025-10-04 | 2026-07-24 |
| CVE-2025-38253 json | In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix crash in wacom_aes_battery_handler() Co... | Not Provided | 2025-07-09 | 2026-07-30 |
| CVE-2024-58352 json | Landray OA contains an unauthenticated HQL injection vulnerability that allows unauthenticated attackers to query arbitrary H... | Not Provided | 2026-07-02 | 2026-07-02 |
| CVE-2024-26646 json | In the Linux kernel, the following vulnerability has been resolved: thermal: intel: hfi: Add syscore callbacks for system-wi... | Not Provided | 2024-03-26 | 2026-08-04 |
| CVE-2023-53378 json | In the Linux kernel, the following vulnerability has been resolved: drm/i915/dpt: Treat the DPT BO as a framebuffer Current... | Not Provided | 2025-09-18 | 2026-08-04 |
| CVE-2020-25638 json | A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. A SQL injection in the implementation of ... | 7.4 - HIGH | 2020-12-02 | 2023-11-07 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Hibernate | Hibernate Orm | 5.4.9 | |||
| Application | Hibernate | Hibernate Orm | 5.4.8 | |||
| Application | Hibernate | Hibernate Orm | 5.4.7 | |||
| Application | Hibernate | Hibernate Orm | 5.4.6 | |||
| Application | Hibernate | Hibernate Orm | 5.4.5 | |||
| Application | Hibernate | Hibernate Orm | 5.4.4 | |||
| Application | Hibernate | Hibernate Orm | 5.4.3 | |||
| Application | Hibernate | Hibernate Orm | 5.4.24 | |||
| Application | Hibernate | Hibernate Orm | 5.4.23 | |||
| Application | Hibernate | Hibernate Orm | 5.4.22 | |||
| Application | Hibernate | Hibernate Orm | 5.4.21 | |||
| Application | Hibernate | Hibernate Orm | 5.4.20 | |||
| Application | Hibernate | Hibernate Orm | 5.4.2 | |||
| Application | Hibernate | Hibernate Orm | 5.4.19 | |||
| Application | Hibernate | Hibernate Orm | 5.4.18 | |||
| Application | Hibernate | Hibernate Orm | 5.4.17 | |||
| Application | Hibernate | Hibernate Orm | 5.4.16 | |||
| Application | Hibernate | Hibernate Orm | 5.4.15 | |||
| Application | Hibernate | Hibernate Orm | 5.4.14 | |||
| Application | Hibernate | Hibernate Orm | 5.4.13 |