Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:hibernate_validator:4.2.0:beta1:*:*:*:*:*:*

part: a version: 4.2.0 update: beta1

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductHibernate Validator (a7a48939-b85a-598a-b5d7-6599ea681f33)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libhibernate-validator-java purl2cpe 2026-06-01 10:12:52.815240
pkg:deb/debian/libhibernate-validator4-java purl2cpe 2026-06-01 10:12:52.815238
pkg:deb/ubuntu/libhibernate-validator-java purl2cpe 2026-06-01 10:12:52.815243
pkg:deb/ubuntu/libhibernate-validator4-java purl2cpe 2026-06-01 10:12:52.815241
pkg:github/hibernate/hibernate-validator purl2cpe 2026-06-01 10:12:52.815244
pkg:maven/org.hibernate.validator/hibernate-validator purl2cpe 2026-06-01 10:12:52.815245

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-3558 vulnerable 2026-06-08 05:05:33.422303 Details available
ReflectionHelper (org.hibernate.validator.util.ReflectionHelper) in Hibernate Validator 4.1.0 before 4.2.1, 4.3.x before 4.3.2, and 5.x before 5.1.2 allows attackers to bypass Java Security Manager (JSM) restrictions and execute restricted reflection calls via a crafted application.
Published: 2014-09-30T14:00:00.000Z
Updated: 2024-08-06T10:50:16.757Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.