5

CVE-2014-3558

ReflectionHelper (org.hibernate.validator.util.ReflectionHelper) in Hibernate Validator 4.1.0 before 4.2.1, 4.3.x before 4.3.2, and 5.x before 5.1.2 allows attackers to bypass Java Security Manager (JSM) restrictions and execute restricted reflection calls via a crafted application.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Redhat ≫ Hibernate Validator Version >= 4.3.0 < 4.3.2
Redhat ≫ Hibernate Validator Version >= 5.0.0 <= 5.0.3
Redhat ≫ Hibernate Validator Version >= 5.1.0 < 5.1.2
Redhat ≫ Hibernate Validator Version 4.1.0
Redhat ≫ Hibernate Validator Version 4.2.0
Redhat ≫ Hibernate Validator Version 4.2.0 Update beta1
Redhat ≫ Hibernate Validator Version 4.2.0 Update beta2
Redhat ≫ Hibernate Validator Version 4.2.0 Update cr1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.91% 0.852
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://rhn.redhat.com/errata/RHSA-2015-0720.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0125.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-1285.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-1286.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-1287.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-1288.html
Third Party Advisory
https://github.com/victims/victims-cve-db/blob/master/database/java/2014/3558.yaml
Third Party Advisory
https://hibernate.atlassian.net/browse/HV-912
Third Party Advisory