VULNERABILITY INTELLIGENCE

CVE-2007-4575

CVSS score9.3 HIGH
EPSS probability14.28%
CISA KEVNot currently listed
Published2007-12-06
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

HSQLDB before 1.8.0.9, as used in OpenOffice.org (OOo) 2 before 2.3.1, allows user-assisted remote attackers to execute arbitrary Java code via crafted database documents, related to "exposing static java methods."

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references