Vendor
Hibernate
6 known vulnerabilities in products by Hibernate, 0 of them actively exploited (CISA KEV).
Key figures
6
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2020-25638 | Hibernate-core: SQL Injection | 7.4 | |
| Medium | CVE-2019-10219 | Hibernate Hibernate-validator: Cross-site Scripting | 6.5 | |
| Medium | CVE-2019-14900 | Hibernate: SQL Injection | 6.5 | |
| Medium | CVE-2020-10693 | Hibernate Hibernate-validator: Improper Input Validation | 5.3 | |
| High | CVE-2025-35036 | hibernate-validator insecure default Expression Language interpolation | 7.3 | |
| Medium | CVE-2023-1932 | Hibernate-validator: rendering of invalid html with safehtml leads to html injection and xss | 6.1 |
Products
| Hibernate Hibernate-validator | 4 | 0 |