CVE-2022-46337
1 advisory.
Maven/org.apache.derby:derby CVE-2022-46337: critical 9.8, EPSS 1.42%
Apache Derby: LDAP injection vulnerability in authenticator
Action: Upgrade org.apache.derby:derby to 10.14.2.1 (10.14.x), 10.15.2.1 (10.15.x) or 10.16.1.2 (10.16.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 10.1.1.0 | - | 10.1.3.1 |
| 10.2.1.6 | - | 10.2.2.0 |
| 10.3.1.4 | - | 10.3.3.0 |
| 10.4.1.3 | - | 10.4.2.0 |
| 10.5.1.1 | - | 10.5.3.0 |
| 10.6.1.0 | - | 10.6.2.1 |
| 10.8.1.2 | - | 10.8.3.0 |
| 10.10.1.1 | - | 10.10.2.0 |
| 10.14.2.0 | 10.14.2.1 | - |
| 10.16.1.1 | 10.16.1.2 | - |
| 10.15.1.3 | 10.15.2.1 | - |
Fixed versions
| 10.14.2.1 | 10.16.1.2 | 10.15.2.1 |
Sources
- osv: GHSA-rcjc-c4pj-xxrp
- https://nvd.nist.gov/vuln/detail/CVE-2022-46337
- https://github.com/apache/derby
- https://issues.apache.org/jira/browse/DERBY-7147
- https://lists.apache.org/thread/q23kvvtoohgzwybxpwozmvvk17rp0td3
CVE-2022-46337 · published · modified · JSON