Hibernate vulnerabilities

Products

• Hibernate-validator 4
• Orm 2

Newest

• hibernate validator, redhat hibernate validator +1 more hibernate-validator insecure default Expression Language interpolation CVE-2025-35036 Fix available 6.9 MediumJune 3, 2025
• hibernate hibernate-validator, red hat a-mq clients 2, cryostat 2 +29 more +31 more Hibernate-validator: rendering of invalid html with safehtml leads to html injection and xss CVE-2023-1932 Fix available 6.1 MediumNovember 7, 2024
• hibernate orm, debian linux, oracle communications cloud native core console +2 more +4 more SQL injection in hibernate-core CVE-2020-25638 Fix available 7.4 HighDecember 2, 2020
• hibernate orm, quarkus, redhat build of quarkus +7 more +9 more SQL Injection in Hibernate ORM CVE-2019-14900 Public exploitFix available 6.5 MediumJuly 6, 2020
• redhat hibernate validator, hibernate hibernate-validator, ibm websphere application server +5 more +7 more Improper Input Validation in Hibernate Validator CVE-2020-10693 Fix available 5.3 MediumMay 6, 2020
• hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 more The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks CVE-2019-10219 Public exploitFix available 6.5 MediumNovember 8, 2019
• redhat hibernate validator, hibernate hibernate-validator, redhat jboss enterprise application platform +4 more +6 more Privilege Escalation in Hibernate Validator CVE-2017-7536 Fix available 7.0 HighJanuary 10, 2018