CWE-564 · 12 records
SQL Injection: Hibernate
CVEs in this class
12 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
34Monitor | CVE-2024-58352No exploit | Landray OA Unauthenticated HQL Injection via wechatLoginHelper.doshenzhen landray software co., ltd. · landry office automation (oa) · CWE-564 | High8.7 | — | 0.8% | Jul 2, 2026 |
30Monitor | CVE-2024-48988No exploit | Apache StreamPark: SQL injection vulnerabilityapache · streampark · CWE-564 | High7.6 | — | 0.5% | Aug 22, 2025 |
27Monitor | CVE-2026-23959No exploit | CoreShop Vulnerable to SQL Injection via Admin customer-company-modifiercoreshop · coreshop · CWE-564 | Medium6.9 | — | 0.4% | Jan 21, 2026 |
26Monitor | CVE-2025-0959No exploit | Eventer - WordPress Event & Booking Manager Plugin <= 3.9.9.2 - Authenticated (Subscriber+) SQL Injection via reg_idimithemes · eventer · CWE-564 | Medium6.5 | — | 0.4% | Mar 7, 2025 |
24Monitor | CVE-2026-111390No exploit | Erupt through 2.3.0 HQL Injection via linkTreeVal in Data Table APIerupts · erupt · CWE-564 | Medium6.0 | — | 0.2% | 5 days ago |
21Monitor | CVE-2025-67280No exploit | In TIM BPM Suite/ TIM FLOW through 9.1.2 multiple Hibernate Query Language injection vulnerabilities exist which allow a low privileged usertim-solutions · tim flow · CWE-564 | Medium5.4 | — | 0.2% | Jan 9, 2026 |
20Monitor | CVE-2026-13337No exploit | CWE-564: SQL Injection: Hibernate vulnerability exists that could allow the injection of a malicious HQL query in the NetBotz database when schneider electric · netbotz 5 - 750/755 · CWE-564 | Medium5.1 | — | 0.1% | Sep 1, 2026 |
19Monitor | CVE-2026-76451No exploit | Cisco Identity Services Engine Certificate Management SQL Injection Vulnerabilitycisco · identity services engine passive identity connector · CWE-564 | Medium4.9 | — | 0.4% | Sep 16, 2026 |
19Monitor | CVE-2026-76450No exploit | Cisco Identity Services Engine SQL Injection Vulnerabilitycisco · identity services engine · CWE-564 | Medium4.9 | — | 0.4% | Sep 16, 2026 |
19Monitor | CVE-2026-22242No exploit | CoreShop Vulnerable to SQL Injection via Admin Reportscoreshop · coreshop · CWE-564 | Medium4.9 | — | 0.4% | Jan 8, 2026 |
17Monitor | CVE-2026-73796No exploit | HPE NonStop TSQLEXE - Memory Corruption vulnerabilityhewlett packard enterprise · hpe nonstop tsqlexe · CWE-564 | Medium4.4 | — | 0.1% | Oct 14, 2026 |
4Monitor | CVE-2025-8052No exploit | HQL Injection vulnerability has been discovered in Opentext Flipper.opentext · flipper · CWE-564 | Low1.0 | — | 0.3% | Oct 20, 2025 |
- CVE-2024-5835234Monitor
Landray OA Unauthenticated HQL Injection via wechatLoginHelper.do
HighCVSS 8.7No exploitEPSS 0%shenzhen landray software co., ltd. · landry office automation (oa)Jul 2, 2026
- CVE-2024-4898830Monitor
Apache StreamPark: SQL injection vulnerability
HighCVSS 7.6No exploitEPSS 0%apache · streamparkAug 22, 2025
- CVE-2026-2395927Monitor
CoreShop Vulnerable to SQL Injection via Admin customer-company-modifier
MediumCVSS 6.9No exploitEPSS 0%coreshop · coreshopJan 21, 2026
- CVE-2025-095926Monitor
Eventer - WordPress Event & Booking Manager Plugin <= 3.9.9.2 - Authenticated (Subscriber+) SQL Injection via reg_id
MediumCVSS 6.5No exploitEPSS 0%imithemes · eventerMar 7, 2025
- CVE-2026-11139024Monitor
Erupt through 2.3.0 HQL Injection via linkTreeVal in Data Table API
MediumCVSS 6.0No exploitEPSS 0%erupts · erupt5 days ago
- CVE-2025-6728021Monitor
In TIM BPM Suite/ TIM FLOW through 9.1.2 multiple Hibernate Query Language injection vulnerabilities exist which allow a low privileged user
MediumCVSS 5.4No exploitEPSS 0%tim-solutions · tim flowJan 9, 2026
- CVE-2026-1333720Monitor
CWE-564: SQL Injection: Hibernate vulnerability exists that could allow the injection of a malicious HQL query in the NetBotz database when
MediumCVSS 5.1No exploitEPSS 0%schneider electric · netbotz 5 - 750/755Sep 1, 2026
- CVE-2026-7645119Monitor
Cisco Identity Services Engine Certificate Management SQL Injection Vulnerability
MediumCVSS 4.9No exploitEPSS 0%cisco · identity services engine passive identity connectorSep 16, 2026
- CVE-2026-7645019Monitor
Cisco Identity Services Engine SQL Injection Vulnerability
MediumCVSS 4.9No exploitEPSS 0%cisco · identity services engineSep 16, 2026
- CVE-2026-2224219Monitor
CoreShop Vulnerable to SQL Injection via Admin Reports
MediumCVSS 4.9No exploitEPSS 0%coreshop · coreshopJan 8, 2026
- CVE-2026-7379617Monitor
HPE NonStop TSQLEXE - Memory Corruption vulnerability
MediumCVSS 4.4No exploitEPSS 0%hewlett packard enterprise · hpe nonstop tsqlexeOct 14, 2026
- CVE-2025-80524Monitor
HQL Injection vulnerability has been discovered in Opentext Flipper.
LowCVSS 1.0No exploitEPSS 0%opentext · flipperOct 20, 2025