Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:hibernate_validator:4.2.0:cr1:*:*:*:*:*:*

part: a version: 4.2.0 update: cr1

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductHibernate Validator (a7a48939-b85a-598a-b5d7-6599ea681f33)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libhibernate-validator-java purl2cpe 2026-06-01 10:12:52.815256
pkg:deb/debian/libhibernate-validator4-java purl2cpe 2026-06-01 10:12:52.815255
pkg:deb/ubuntu/libhibernate-validator-java purl2cpe 2026-06-01 10:12:52.815259
pkg:deb/ubuntu/libhibernate-validator4-java purl2cpe 2026-06-01 10:12:52.815257
pkg:github/hibernate/hibernate-validator purl2cpe 2026-06-01 10:12:52.815260
pkg:maven/org.hibernate.validator/hibernate-validator purl2cpe 2026-06-01 10:12:52.815261

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-3558 vulnerable 2026-06-08 05:05:33.423265 Details available
ReflectionHelper (org.hibernate.validator.util.ReflectionHelper) in Hibernate Validator 4.1.0 before 4.2.1, 4.3.x before 4.3.2, and 5.x before 5.1.2 allows attackers to bypass Java Security Manager (JSM) restrictions and execute restricted reflection calls via a crafted application.
Published: 2014-09-30T14:00:00.000Z
Updated: 2024-08-06T10:50:16.757Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.