HSQLDB Code Execution Vulnerability

2022-10-1000:00:00

China National Vulnerability Database

www.cnvd.org.cn

hsqldb

code execution

vulnerability

untrusted input

java

static method

attacker

cnvd

EPSS

0.013

Percentile

85.7%

JSON

HSQLDB is a relational database management system written in Java by The HSQL Development Group team. HSQLDB suffers from a code execution vulnerability that stems from its use of java.sql.Statement or java.sql.PreparedStatement to handle untrusted input, which by default allows calls to any Any static method of a Java class can be exploited by an attacker to execute code.

nessus 15

osv 3

ubuntucve 1

debiancve 1

veracode 2

prion 1

redhatcve 1

cve 1

openvas 4

debian 2

redhat 8

oraclelinux 2