{"id":"CVE-2015-1832","aliases":["DEBIAN-CVE-2015-1832","EUVD-2022-5628","GHSA-wr69-g62g-2r9h","MGASA-2016-0385","UBUNTU-CVE-2015-1832","openSUSE-SU-2024:10092-1"],"status":"published","title":"Improper Restriction of XML External Entity Reference in Apace Derby","description":"XML external entity (XXE) vulnerability in the SqlXmlUtil code in Apache Derby before 10.12.1.1, when a Java Security Manager is not in place, allows context-dependent attackers to read arbitrary files or cause a denial of service (resource consumption) via vectors involving XmlVTI and the XML datatype.","severity":{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.12173,"percentile":0.96185,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-399","CWE-611"],"published":"2016-10-03T21:00:00Z","modified":"2026-09-09T07:00:35Z","fixes":[{"ecosystem":"Maven","package":"org.apache.derby:derby","fixed_in":["10.12.1.1"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"derby","fixed_in":["10.13.1.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"derby","fixed_in":["10.13.1.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"derby","fixed_in":["10.13.1.1-1"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"derby","fixed_in":["10.10.2.0-1.1.mga5"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.apache.derby:derby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"10.11.1.1"},{"fixed":"10.12.1.1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"derby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.13.1.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"derby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.13.1.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"derby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.13.1.1-1"}]}]},{"source":"osv","ecosystem":"Maven","package":"org.apache.derby:derby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.12.1.1"}]}],"versions":["10.1.1.0","10.1.2.1","10.1.3.1","10.10.1.1","10.10.2.0","10.11.1.1","10.2.1.6","10.2.2.0","10.3.1.4","10.3.2.1","10.4.1.3","10.4.2.0","10.5.3.0","10.5.3.0_1","10.6.1.0","10.6.2.1","10.7.1.1","10.8.1.2","10.8.2.2","10.8.3.0","10.9.1.0"]},{"source":"osv","ecosystem":"Mageia:5","package":"derby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.10.2.0-1.1.mga5"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"derby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["10.10.2.0-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"derby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.11.1.1-3.2"}]}],"bundled":4}],"products":[{"vendor":"apache","product":"derby"}],"references":[{"url":"http://www.securityfocus.com/bid/93132","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5%40%3Csolr-user.lucene.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","tags":["x_refsource_CONFIRM","x_transferred","advisory","web"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","tags":["x_refsource_MISC","x_transferred","advisory","web"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://issues.apache.org/jira/browse/DERBY-6807","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","report","web"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21990100","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory","web","report"]},{"url":"https://svn.apache.org/viewvc?view=revision\u0026revision=1691461","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","report","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-1832","tags":["advisory"]},{"url":"https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451@%3Csolr-user.lucene.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5@%3Csolr-user.lucene.apache.org%3E","tags":["web"]},{"url":"https://github.com/advisories/GHSA-wr69-g62g-2r9h"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-1832","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2016-0385.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=19590","tags":["report"]},{"url":"https://lists.opensuse.org/opensuse-updates/2016-10/msg00051.html","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2015-1832","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-1832","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2005-4849","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-7216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-7217","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1832","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2015-1832","description":"XML external entity (XXE) vulnerability in the SqlXmlUtil code in Apache Derby before 10.12.1.1, when a Java Security Manager is not in place, allows context-dependent attackers to read arbitrary files or cause a denial of service (resource consumption) via vectors involving XmlVTI and the XML datatype.","status":"published","published":"2016-10-03T21:00:00Z","modified":"2024-08-06T04:54:16.326Z","updated_at":"2026-11-02T14:35:44.046042Z"}],"euvd":[{"id":"EUVD-2022-5628","description":"XML external entity (XXE) vulnerability in the SqlXmlUtil code in Apache Derby before 10.12.1.1, when a Java Security Manager is not in place, allows context-dependent attackers to read arbitrary files or cause a denial of service (resource consumption) via vectors involving XmlVTI and the XML datatype.","status":"published","published":"2016-10-03T21:00:00Z","modified":"2024-08-06T04:54:16Z","updated_at":"2026-11-03T02:22:13.664628Z"}],"ghsa":[{"id":"GHSA-wr69-g62g-2r9h","title":"Improper Restriction of XML External Entity Reference in Apace Derby","description":"XML external entity (XXE) vulnerability in the SqlXmlUtil code in Apache Derby before 10.12.1.1, when a Java Security Manager is not in place, allows context-dependent attackers to read arbitrary files or cause a denial of service (resource consumption) via vectors involving XmlVTI and the XML datatype.","status":"published","published":"2022-05-13T01:14:26Z","modified":"2023-01-27T05:02:09Z","cvss":[{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"cwes":["CWE-611"],"updated_at":"2026-11-02T14:36:17.04874Z"}],"nvd":[{"id":"CVE-2015-1832","description":"XML external entity (XXE) vulnerability in the SqlXmlUtil code in Apache Derby before 10.12.1.1, when a Java Security Manager is not in place, allows context-dependent attackers to read arbitrary files or cause a denial of service (resource consumption) via vectors involving XmlVTI and the XML datatype.","status":"published","published":"2016-10-03T21:59:02.533Z","modified":"2026-06-17T00:23:04.92Z","cvss":[{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-399","CWE-611"],"updated_at":"2026-11-02T14:03:16.97467Z"}],"osv":[{"id":"CVE-2015-1832","description":"XML external entity (XXE) vulnerability in the SqlXmlUtil code in Apache Derby before 10.12.1.1, when a Java Security Manager is not in place, allows context-dependent attackers to read arbitrary files or cause a denial of service (resource consumption) via vectors involving XmlVTI and the XML datatype.","status":"published","published":"2016-10-03T21:59:02Z","modified":"2026-04-16T06:20:36.475989399Z","cvss":[{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:00.594921Z"},{"id":"DEBIAN-CVE-2015-1832","description":"XML external entity (XXE) vulnerability in the SqlXmlUtil code in Apache Derby before 10.12.1.1, when a Java Security Manager is not in place, allows context-dependent attackers to read arbitrary files or cause a denial of service (resource consumption) via vectors involving XmlVTI and the XML datatype.","status":"published","published":"2016-10-03T21:59:02.533Z","modified":"2026-09-09T07:00:35.067661451Z","cvss":[{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:26.752992Z"},{"id":"GHSA-wr69-g62g-2r9h","title":"Improper Restriction of XML External Entity Reference in Apace Derby","description":"XML external entity (XXE) vulnerability in the SqlXmlUtil code in Apache Derby before 10.12.1.1, when a Java Security Manager is not in place, allows context-dependent attackers to read arbitrary files or cause a denial of service (resource consumption) via vectors involving XmlVTI and the XML datatype.","status":"published","published":"2022-05-13T01:14:26Z","modified":"2023-11-08T03:57:50.873765Z","cvss":[{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"cwes":["CWE-611"],"updated_at":"2026-11-02T15:46:59.131095Z"},{"id":"UBUNTU-CVE-2015-1832","description":"XML external entity (XXE) vulnerability in the SqlXmlUtil code in Apache Derby before 10.12.1.1, when a Java Security Manager is not in place, allows context-dependent attackers to read arbitrary files or cause a denial of service (resource consumption) via vectors involving XmlVTI and the XML datatype.","status":"published","published":"2016-10-03T21:59:00Z","modified":"2025-10-24T04:45:20Z","cvss":[{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:10.045446Z"},{"id":"MGASA-2016-0385","title":"Updated derby packages fix security vulnerability","description":"Apache Derby could allow a remote attacker to obtain sensitive\ninformation, caused by a XML external entity (XXE) error when processing\nXML data by the XML datatype and XmlVTI. An attacker could exploit this\nvulnerability to read arbitrary files on the system or cause a denial of\nservice (CVE-2015-1832).\n","status":"published","published":"2016-11-17T23:40:52Z","modified":"2026-04-16T06:23:26.413747399Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"openSUSE-SU-2024:10092-1","title":"derby-10.11.1.1-3.2 on GA media","description":"These are all security issues fixed in the derby-10.11.1.1-3.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:23:41.622819Z","updated_at":"2026-11-02T16:58:33.135986Z"}]}}