Known Vulnerabilities for Hibernate Orm by Hibernate
Listed below are 2 of the newest known vulnerabilities associated with "Hibernate Orm" by "Hibernate".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-0603 json | A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability... | Not Provided | 2026-01-23 | 2026-08-19 |
| CVE-2025-39936 json | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Always pass in an error pointer to __sev_p... | Not Provided | 2025-10-04 | 2026-07-24 |
| CVE-2025-38253 json | In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix crash in wacom_aes_battery_handler() Co... | Not Provided | 2025-07-09 | 2026-07-30 |
| CVE-2025-10968 json | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE - 564 - SQL Injection: Hibernate vu... | Not Provided | 2025-11-07 | 2026-06-05 |
| CVE-2024-58352 json | Landray OA contains an unauthenticated HQL injection vulnerability that allows unauthenticated attackers to query arbitrary H... | Not Provided | 2026-07-02 | 2026-07-02 |
| CVE-2024-26646 json | In the Linux kernel, the following vulnerability has been resolved: thermal: intel: hfi: Add syscore callbacks for system-wi... | Not Provided | 2024-03-26 | 2026-08-04 |
| CVE-2024-7071 json | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE - 564 - SQL Injection: Hibernate vu... | Not Provided | 2024-08-27 | 2026-06-03 |
| CVE-2023-53378 json | In the Linux kernel, the following vulnerability has been resolved: drm/i915/dpt: Treat the DPT BO as a framebuffer Current... | Not Provided | 2025-09-18 | 2026-08-04 |
| CVE-2020-25638 json | A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. A SQL injection in the implementation of ... | 7.4 - HIGH | 2020-12-02 | 2023-11-07 |
| CVE-2019-14900 json | A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1. A SQL injection in the implementation of... | 6.5 - MEDIUM | 2020-07-06 | 2023-11-07 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Hibernate | Hibernate Orm | 5.4.9 | |||
| Application | Hibernate | Hibernate Orm | 5.4.8 | |||
| Application | Hibernate | Hibernate Orm | 5.4.7 | |||
| Application | Hibernate | Hibernate Orm | 5.4.6 | |||
| Application | Hibernate | Hibernate Orm | 5.4.5 | |||
| Application | Hibernate | Hibernate Orm | 5.4.4 | |||
| Application | Hibernate | Hibernate Orm | 5.4.3 | |||
| Application | Hibernate | Hibernate Orm | 5.4.24 | |||
| Application | Hibernate | Hibernate Orm | 5.4.23 | |||
| Application | Hibernate | Hibernate Orm | 5.4.22 | |||
| Application | Hibernate | Hibernate Orm | 5.4.21 | |||
| Application | Hibernate | Hibernate Orm | 5.4.20 | |||
| Application | Hibernate | Hibernate Orm | 5.4.2 | |||
| Application | Hibernate | Hibernate Orm | 5.4.19 | |||
| Application | Hibernate | Hibernate Orm | 5.4.18 | |||
| Application | Hibernate | Hibernate Orm | 5.4.17 | |||
| Application | Hibernate | Hibernate Orm | 5.4.16 | |||
| Application | Hibernate | Hibernate Orm | 5.4.15 | |||
| Application | Hibernate | Hibernate Orm | 5.4.14 | |||
| Application | Hibernate | Hibernate Orm | 5.4.13 |