Odata4j

CVEs (3)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2016-11024	Odata4j Project Odata4j	Cri	0.64	9.8	0.01	Mar 30, 2020	odata4j 0.7.0 allows ExecuteJPQLQueryCommand.java SQL injection. NOTE: this product is apparently discontinued.
CVE-2016-11023	Odata4j Project Odata4j	Cri	0.64	9.8	0.01	Mar 30, 2020	odata4j 0.7.0 allows ExecuteCountQueryCommand.java SQL injection. NOTE: this product is apparently discontinued.
CVE-2014-0171	Odata4j Project Odata4j		0.00	—	0.02	Jan 15, 2015	XML external entity (XXE) vulnerability in StaxXMLFactoryProvider2 in Odata4j, as used in Red Hat JBoss Data Virtualization before 6.0.0 patch 4, allows remote attackers to read arbitrary files via a crafted request to a REST endpoint.

CVE-2016-11024CriMar 30, 2020
Odata4j Project
Odata4j
risk 0.64cvss 9.8epss 0.01
odata4j 0.7.0 allows ExecuteJPQLQueryCommand.java SQL injection. NOTE: this product is apparently discontinued.
CVE-2016-11023CriMar 30, 2020
Odata4j Project
Odata4j
risk 0.64cvss 9.8epss 0.01
odata4j 0.7.0 allows ExecuteCountQueryCommand.java SQL injection. NOTE: this product is apparently discontinued.
CVE-2014-0171Jan 15, 2015
Odata4j Project
Odata4j
risk 0.00cvss —epss 0.02
XML external entity (XXE) vulnerability in StaxXMLFactoryProvider2 in Odata4j, as used in Red Hat JBoss Data Virtualization before 6.0.0 patch 4, allows remote attackers to read arbitrary files via a crafted request to a REST endpoint.