GCVE - cpe:2.3:a:orientdb:orientdb:2.0.14:*:*:*:community:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:orientdb:orientdb:2.0.14:*:*:*:community:*:*:*

part: a version: 2.0.14 update: *

Notes

Imported from NVD CPE 2.0 feed

PURL	Source	Last updated
`pkg:github/orientechnologies/orientdb`	purl2cpe	2026-06-01 10:16:16.787837
`pkg:maven/com.orientechnologies/orientdb-parent`	purl2cpe	2026-06-01 10:16:16.787840
`pkg:rpm/opensuse/orientdb`	purl2cpe	2026-06-01 10:16:16.787843

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-2918`	vulnerable	2026-06-08 05:06:36.189341	Details available The Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 does not properly restrict use of FRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site. Published: 2015-12-31T02:00:00.000Z Updated: 2024-08-06T05:32:20.565Z Open on db.gcve.eu Reference links https://www.kb.cert.org/vuls/id/845332	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-2913`	vulnerable	2026-06-08 05:06:36.184553	Details available server/network/protocol/http/OHttpSessionManager.java in the Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 improperly relies on the java.util.Random class for generation of random Session ID values, which makes it easier for remote attackers to predict a value by determining the internal state of the PRNG in this class. Published: 2015-12-31T02:00:00.000Z Updated: 2024-08-06T05:32:20.367Z Open on db.gcve.eu Reference links https://www.kb.cert.org/vuls/id/845332 https://github.com/orientechnologies/orientdb/commit/668ece96be210e742a4e2820a3085b215cf55104	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.