Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:hibernate_validator:4.1.0:*:*:*:*:*:*:*

part: a version: 4.1.0 update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductHibernate Validator (a7a48939-b85a-598a-b5d7-6599ea681f33)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libhibernate-validator-java purl2cpe 2026-06-01 10:12:52.815223
pkg:deb/debian/libhibernate-validator4-java purl2cpe 2026-06-01 10:12:52.815222
pkg:deb/ubuntu/libhibernate-validator-java purl2cpe 2026-06-01 10:12:52.815226
pkg:deb/ubuntu/libhibernate-validator4-java purl2cpe 2026-06-01 10:12:52.815225
pkg:github/hibernate/hibernate-validator purl2cpe 2026-06-01 10:12:52.815227
pkg:maven/org.hibernate.validator/hibernate-validator purl2cpe 2026-06-01 10:12:52.815229

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-3558 vulnerable 2026-06-08 05:05:33.420974 Details available
ReflectionHelper (org.hibernate.validator.util.ReflectionHelper) in Hibernate Validator 4.1.0 before 4.2.1, 4.3.x before 4.3.2, and 5.x before 5.1.2 allows attackers to bypass Java Security Manager (JSM) restrictions and execute restricted reflection calls via a crafted application.
Published: 2014-09-30T14:00:00.000Z
Updated: 2024-08-06T10:50:16.757Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.