Hypersql Database
Approved changes feed: RSS · Atom
cpe:2.3:a:hsqldb:hypersql_database:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Hsqldb (b7b9251e-74d0-59a7-aa0a-191b335c72d7) |
|---|---|
| Product | Hypersql Database (541f108c-05b4-57ca-9f8d-1b5a7e8adfac) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/hsqldb |
purl2cpe | 2026-06-01 10:15:45.878566 |
pkg:deb/ubuntu/hsqldb |
purl2cpe | 2026-06-01 10:15:45.878569 |
pkg:github/necrontyr/hsqldb |
purl2cpe | 2026-06-01 10:15:45.878572 |
pkg:github/ryenus/hsqldb |
purl2cpe | 2026-06-01 10:15:45.878575 |
pkg:maven/org.hsqldb/hsqldb |
purl2cpe | 2026-06-01 10:15:45.878578 |
pkg:rpm/centos/hsqldb |
purl2cpe | 2026-06-01 10:15:45.878580 |
pkg:rpm/fedora/hsqldb |
purl2cpe | 2026-06-01 10:15:45.878583 |
pkg:rpm/opensuse/hsqldb |
purl2cpe | 2026-06-01 10:15:45.878586 |
pkg:sourceforge/hsqldb |
purl2cpe | 2026-06-01 10:15:45.878588 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-41853 |
vulnerable | 2026-06-08 05:49:28.741733 |
Remote code execution in HyperSQL DataBase
HIGH (8)
Those using java.sql.Statement or java.sql.PreparedStatement in hsqldb (HyperSQL DataBase) to process untrusted input may be vulnerable to a remote code execution attack. By default it is allowed to call any static method of any Java class in the classpath resulting in code execution. The issue can be prevented by updating to 2.7.1 or by setting the system property "hsqldb.method_class_names" to classes which are allowed to be called. For example, System.setProperty("hsqldb.method_class_names", "abc") or Java argument -Dhsqldb.method_class_names="abc" can be used. From version 2.7.1 all classes by default are not accessible except those in java.lang.Math and need to be manually enabled.
Published: 2022-10-06T17:14:43.225Z
Updated: 2025-04-21T13:48:46.363Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.