VULNERABILITY INTELLIGENCE

CVE-2014-3558

CVSS score5 MEDIUM
EPSS probability2.91%
CISA KEVNot currently listed
Published2014-09-30
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N

Description

ReflectionHelper (org.hibernate.validator.util.ReflectionHelper) in Hibernate Validator 4.1.0 before 4.2.1, 4.3.x before 4.3.2, and 5.x before 5.1.2 allows attackers to bypass Java Security Manager (JSM) restrictions and execute restricted reflection calls via a crafted application.

Primary references