Skip to content
Noroxi

Orientdb records

7 published records for vendor orientdb.

Researcher profile

Entered KEV
0 · 0%
Weaponized
1 · 14.3%
Pre-auth RCE
2
With a fix record
57.1%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

7 records
  • CVE-2017-11467
    61This week

    OrientDB through 2.2.22 does not enforce privilege requirements during "where" or "fetchplan" or "order by" use, which allows remote attacke

    CriticalCVSS 9.8WeaponizedEPSS 73%

    orientdb · orientdbJul 19, 2017

  • CVE-2015-2912
    35Monitor

    The JSONP endpoint in the Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 does not properly restr

    HighCVSS 8.8No exploitEPSS 1%

    orientdb · orientdbDec 31, 2015

  • CVE-2015-2913
    24Monitor

    server/network/protocol/http/OHttpSessionManager.java in the Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x b

    MediumCVSS 5.9No exploitEPSS 2%

    orientdb · orientdbDec 31, 2015

  • CVE-2015-2918
    24Monitor

    The Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 does not properly restrict use of FRAME eleme

    MediumCVSS 6.1No exploitEPSS 1%

    orientdb · orientdbDec 31, 2015

  • CVE-2019-25447
    21Monitor

    OrientDB 3.0.17 Cross-Site Request Forgery

    MediumCVSS 5.3No exploitEPSS 0%

    orientdb · orientdbFeb 20, 2026

  • CVE-2019-25448
    20Monitor

    OrientDB 3.0.17 Stored Cross-Site Scripting via User Creation

    MediumCVSS 5.1No exploitEPSS 0%

    orientdb · orientdbFeb 20, 2026

  • CVE-2019-25449
    20Monitor

    OrientDB 3.0.17 Reflected Cross-Site Scripting via document endpoint

    MediumCVSS 5.1No exploitEPSS 0%

    orientdb · orientdbFeb 20, 2026