Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:hibernate_validator:4.2.0:beta2:*:*:*:*:*:*

part: a version: 4.2.0 update: beta2

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductHibernate Validator (a7a48939-b85a-598a-b5d7-6599ea681f33)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libhibernate-validator-java purl2cpe 2026-06-01 10:12:52.815248
pkg:deb/debian/libhibernate-validator4-java purl2cpe 2026-06-01 10:12:52.815247
pkg:deb/ubuntu/libhibernate-validator-java purl2cpe 2026-06-01 10:12:52.815251
pkg:deb/ubuntu/libhibernate-validator4-java purl2cpe 2026-06-01 10:12:52.815249
pkg:github/hibernate/hibernate-validator purl2cpe 2026-06-01 10:12:52.815252
pkg:maven/org.hibernate.validator/hibernate-validator purl2cpe 2026-06-01 10:12:52.815253

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-3558 vulnerable 2026-06-08 05:05:33.422790 Details available
ReflectionHelper (org.hibernate.validator.util.ReflectionHelper) in Hibernate Validator 4.1.0 before 4.2.1, 4.3.x before 4.3.2, and 5.x before 5.1.2 allows attackers to bypass Java Security Manager (JSM) restrictions and execute restricted reflection calls via a crafted application.
Published: 2014-09-30T14:00:00.000Z
Updated: 2024-08-06T10:50:16.757Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.