Vulnerability Database
289,599
Total vulnerabilities in the database
CVE-2014-3558
ReflectionHelper (org.hibernate.validator.util.ReflectionHelper) in Hibernate Validator 4.1.0 before 4.2.1, 4.3.x before 4.3.2, and 5.x before 5.1.2 allows attackers to bypass Java Security Manager (JSM) restrictions and execute restricted reflection calls via a crafted application.
| Software | From | Fixed in |
|---|---|---|
| redhat / hibernate_validator | 4.1.0 | 4.1.0.x |
| redhat / hibernate_validator | 4.2.0 | 4.2.0.x |
| redhat / hibernate_validator | 4.2.0-beta1 | 4.2.0-beta1.x |
| redhat / hibernate_validator | 4.2.0-beta2 | 4.2.0-beta2.x |
| redhat / hibernate_validator | 4.2.0-cr1 | 4.2.0-cr1.x |
| redhat / hibernate_validator | 4.3.0 | 4.3.2 |
| redhat / hibernate_validator | 5.0.0 | 5.0.3.x |
| redhat / hibernate_validator | 5.1.0 | 5.1.2 |
org.hibernate / hibernate-validator
|
4.1.0 | 4.2.1 |
|
org.hibernate / hibernate-validator
|
4.3.0 | 4.3.2 |
|
org.hibernate / hibernate-validator
|
5.0.0 | 5.1.2 |
- http://rhn.redhat.com/errata/RHSA-2014-1285.html
- http://rhn.redhat.com/errata/RHSA-2014-1286.html
- http://rhn.redhat.com/errata/RHSA-2014-1287.html
- http://rhn.redhat.com/errata/RHSA-2014-1288.html
- http://rhn.redhat.com/errata/RHSA-2015-0125.html
- http://rhn.redhat.com/errata/RHSA-2015-0720.html
- https://github.com/victims/victims-cve-db/blob/master/database/java/2014/3558.yaml
- https://hibernate.atlassian.net/browse/HV-912