{"action":"Upgrade org.apache.derby:derby to 10.14.2.1 (10.14.x), 10.15.2.1 (10.15.x) or 10.16.1.2 (10.16.x) or later.","affected":[{"introduced":"10.1.1.0","last_affected":"10.1.3.1"},{"introduced":"10.2.1.6","last_affected":"10.2.2.0"},{"introduced":"10.3.1.4","last_affected":"10.3.3.0"},{"introduced":"10.4.1.3","last_affected":"10.4.2.0"},{"introduced":"10.5.1.1","last_affected":"10.5.3.0"},{"introduced":"10.6.1.0","last_affected":"10.6.2.1"},{"introduced":"10.8.1.2","last_affected":"10.8.3.0"},{"introduced":"10.10.1.1","last_affected":"10.10.2.0"},{"fixed":"10.14.2.1","introduced":"10.14.2.0"},{"fixed":"10.16.1.2","introduced":"10.16.1.1"},{"fixed":"10.15.2.1","introduced":"10.15.1.3"}],"component":"org.apache.derby:derby","cve_ids":["CVE-2022-46337"],"ecosystem":"Maven","epss":0.01418,"exploited":false,"fixed_versions":["10.14.2.1","10.16.1.2","10.15.2.1"],"ghsa_id":"GHSA-rcjc-c4pj-xxrp","id":"tcs_01M5N9BJFFS3JF9MZTSTYF4FJG","modified_at":"2026-09-10T03:49:48.215345125Z","published_at":"2023-11-20T09:30:31Z","references":["https://osv.dev/vulnerability/GHSA-rcjc-c4pj-xxrp","https://nvd.nist.gov/vuln/detail/CVE-2022-46337","https://github.com/apache/derby","https://issues.apache.org/jira/browse/DERBY-7147","https://lists.apache.org/thread/q23kvvtoohgzwybxpwozmvvk17rp0td3"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-rcjc-c4pj-xxrp","url":"https://osv.dev/vulnerability/GHSA-rcjc-c4pj-xxrp"}],"summary":"Apache Derby: LDAP injection vulnerability in authenticator"}