Odata4j Project: >> Odata4j Security Vulnerabilities
odata4j 0.7.0 allows ExecuteCountQueryCommand.java SQL injection. NOTE: this product is apparently discontinued.
CVSS Score
9.8
EPSS Score
0.003
Published
2020-03-30
odata4j 0.7.0 allows ExecuteJPQLQueryCommand.java SQL injection. NOTE: this product is apparently discontinued.
CVSS Score
9.8
EPSS Score
0.003
Published
2020-03-30
XML external entity (XXE) vulnerability in StaxXMLFactoryProvider2 in Odata4j, as used in Red Hat JBoss Data Virtualization before 6.0.0 patch 4, allows remote attackers to read arbitrary files via a crafted request to a REST endpoint.
CVSS Score
5.0
EPSS Score
0.004
Published
2015-01-15