[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fvEEQSM2DLTbnCvKwNqUNQgEa5iAChPtx-a0EFxFIYPc":3,"g5a-risk:CVE-2017-7536":266},{"success":4,"data":5,"meta":264},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":84,"references":85,"referencesCount":151,"weaknesses":152,"weaknessesCount":168,"isActivelyExploited":169,"cisaInfo":26,"otxData":26,"relatedBlogPosts":170,"seoMetadata":171,"configurations":196,"relatedVendorCves":262,"notableEvents":263},"CVE-2017-7536","What is CVE-2017-7536?","In Hibernate Validator 5.2.x before 5.2.5 final, 5.3.x, and 5.4.x, it was found that when the security manager's reflective permissions, which allows it to access the private members of the class, are granted to Hibernate Validator, a potential privilege escalation can occur. By allowing the calling code to access those private members without the permission an attacker may be able to validate an invalid instance and access the private member value via ConstraintViolation#getInvalidValue().","In Hibernate Validator 5.2.x before 5.2.5 final, 5.3.x, and 5.4.x, it was found that when the security manager's reflective permissions, which allows it to a...","2018-01-10T15:29:00.283","2023-11-07T02:50:12.58",7,"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":22,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","HIGH","LOW","NONE","UNCHANGED",null,1,5.9,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":34,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":34,"Authentication":24,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:L\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",4.4,3.4,6.4,0.00482,[39,39,39,39,39,39,39],"High",[43,48,52,55,59,62,66,69,72,74,77,81],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"redhat","hibernate_validator","*","cpe:2.3:a:redhat:hibernate_validator:*:*:*:*:*:*:*:*",{"vendor":44,"product":49,"version":50,"criteria":51,"vulnerable":4},"satellite","6.4","cpe:2.3:a:redhat:satellite:6.4:*:*:*:*:*:*:*",{"vendor":44,"product":53,"version":50,"criteria":54,"vulnerable":4},"satellite_capsule","cpe:2.3:a:redhat:satellite_capsule:6.4:*:*:*:*:*:*:*",{"vendor":44,"product":56,"version":57,"criteria":58,"vulnerable":4},"jboss_enterprise_application_platform","6.0.0","cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:*:*:*:*:*:*:*",{"vendor":44,"product":56,"version":60,"criteria":61,"vulnerable":4},"6.4.0","cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.4.0:*:*:*:*:*:*:*",{"vendor":44,"product":63,"version":64,"criteria":65,"vulnerable":4},"enterprise_linux","5.0","cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",{"vendor":44,"product":63,"version":67,"criteria":68,"vulnerable":4},"6.0","cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",{"vendor":44,"product":63,"version":70,"criteria":71,"vulnerable":4},"7.0","cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",{"vendor":44,"product":56,"version":70,"criteria":73,"vulnerable":4},"cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0:*:*:*:*:*:*:*",{"vendor":44,"product":56,"version":75,"criteria":76,"vulnerable":4},"7.1","cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.1:*:*:*:*:*:*:*",{"vendor":44,"product":78,"version":79,"criteria":80,"vulnerable":4},"virtualization","4.0","cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*",{"vendor":44,"product":82,"version":79,"criteria":83,"vulnerable":4},"virtualization_host","cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*",12,[86,92,96,101,104,107,110,113,116,119,122,125,128,131,134,137,140,143,147],{"url":87,"source":88,"tags":89},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F101048","Securityfocus",[90,91],"Third Party Advisory","VDB Entry",{"url":93,"source":94,"tags":95},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1039744","Securitytracker",[90,91],{"url":97,"source":98,"tags":99},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2017:2808","Red Hat",[100],"Vendor Advisory",{"url":102,"source":98,"tags":103},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2017:2809",[100],{"url":105,"source":98,"tags":106},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2017:2810",[100],{"url":108,"source":98,"tags":109},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2017:2811",[100],{"url":111,"source":98,"tags":112},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2017:3141",[100],{"url":114,"source":98,"tags":115},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2017:3454",[100],{"url":117,"source":98,"tags":118},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2017:3455",[100],{"url":120,"source":98,"tags":121},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2017:3456",[100],{"url":123,"source":98,"tags":124},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2017:3458",[100],{"url":126,"source":98,"tags":127},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:2740",[100],{"url":129,"source":98,"tags":130},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:2741",[100],{"url":132,"source":98,"tags":133},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:2742",[100],{"url":135,"source":98,"tags":136},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:2743",[100],{"url":138,"source":98,"tags":139},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:2927",[100],{"url":141,"source":98,"tags":142},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:3817",[100],{"url":144,"source":98,"tags":145},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=1465573",[146,100],"Issue Tracking",{"url":148,"source":149,"tags":150},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002F9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E","Apache",[],19,[153,161],{"id":154,"name":155,"description":156,"extendedDescription":157,"status":158,"abstraction":159,"structure":160},"CWE-592","DEPRECATED: Authentication Bypass Issues","This weakness has been deprecated because it covered redundant concepts already described in CWE-287.","","Deprecated","Class","Simple",{"id":162,"name":163,"description":164,"extendedDescription":165,"status":166,"abstraction":167,"structure":160},"CWE-470","Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')","The product uses external input with reflection to select which classes or code to use, but it does not sufficiently prevent the input from selecting improper classes or code.","If the product uses external inputs to determine which class to instantiate or which method to invoke, then an attacker could supply values to select unexpected classes or methods. If this occurs, then the attacker could create control flow paths that were not intended by the developer. These paths could bypass authentication or access control checks, or otherwise cause the product to behave in an unexpected manner. This situation becomes a doomsday scenario if the attacker can upload files into a location that appears on the product's classpath (CWE-427) or add new entries to the product's classpath (CWE-426). Under either of these conditions, the attacker can use reflection to introduce new, malicious behavior into the product.","Draft","Base",2,false,[],{"title":172,"metaDescription":173,"keywords":174,"canonicalUrl":175,"structuredData":176},"What is CVE-2017-7536? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-7536, a high severity cyber security vulnerability from 2018. In Hibernate Validator 5.2.x before 5.2.5 final, 5.3.x, and ...","CVE-2017-7536, CVE-2017-7536 vulnerability, CVE-2017-7536 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, redhat security, hibernate_validator vulnerability, satellite vulnerability, satellite_capsule vulnerability, jboss_enterprise_application_platform vulnerability, enterprise_linux vulnerability","\u002Fwhat-is\u002Fcve-2017-7536",{"@context":177,"@type":178,"headline":172,"description":173,"datePublished":10,"dateModified":11,"author":179,"publisher":183,"about":187,"mainEntityOfPage":191,"articleSection":194,"keywords":195},"https:\u002F\u002Fschema.org","TechArticle",{"@type":180,"name":181,"url":182},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":180,"name":181,"url":182,"logo":184},{"@type":185,"url":186},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":188,"name":6,"description":189,"additionalType":190},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":192,"@id":193},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-7536","Cybersecurity","CVE-2017-7536, CVE-2017-7536 vulnerability, CVE-2017-7536 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[197,214,222,239,251],{"Operator":26,"Negate":26,"Nodes":198},[199],{"Operator":200,"Negate":26,"CPEMatch":201},"OR",[202,206,210],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":203,"VersionStartExcluding":26,"VersionStartIncluding":204,"VersionEndExcluding":205,"VersionEndIncluding":26},"AAEE4C54-B34B-43F7-9DB9-DA67F0B49191","5.2.0","5.2.5",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":207,"VersionStartExcluding":26,"VersionStartIncluding":208,"VersionEndExcluding":209,"VersionEndIncluding":26},"E9F204C3-E83A-4E28-8AAD-2E9AB2DC305F","5.3.0","5.3.6",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":211,"VersionStartExcluding":26,"VersionStartIncluding":212,"VersionEndExcluding":213,"VersionEndIncluding":26},"500CF40F-5137-43C7-AE7F-405DD0DD7FD8","5.4.0","5.4.2",{"Operator":26,"Negate":26,"Nodes":215},[216],{"Operator":200,"Negate":26,"CPEMatch":217},[218,220],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":219,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"FB283C80-F7AF-4776-8432-655E50D7D65B",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":221,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"461407B5-C167-4DE1-A934-FD5ADFB4AD4E",{"Operator":223,"Negate":26,"Nodes":224},"AND",[225,231],{"Operator":200,"Negate":26,"CPEMatch":226},[227,229],{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":228,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B142ACCC-F7A9-4A3B-BE60-0D6691D5058D",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":230,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B1ABA871-3271-48E2-A69C-5AD70AF94E53",{"Operator":200,"Negate":26,"CPEMatch":232},[233,235,237],{"Vulnerable":26,"Criteria":65,"MatchCriteriaID":234,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"1D8B549B-E57B-4DFE-8A13-CAB06B5356B3",{"Vulnerable":26,"Criteria":68,"MatchCriteriaID":236,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC",{"Vulnerable":26,"Criteria":71,"MatchCriteriaID":238,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"142AD0DD-4CF3-4D74-9442-459CE3347E3A",{"Operator":223,"Negate":26,"Nodes":240},[241,247],{"Operator":200,"Negate":26,"CPEMatch":242},[243,245],{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":244,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"88BF3B2C-B121-483A-AEF2-8082F6DA5310",{"Vulnerable":4,"Criteria":76,"MatchCriteriaID":246,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"7117F117-D439-45EB-BB95-397E5E52C9BB",{"Operator":200,"Negate":26,"CPEMatch":248},[249,250],{"Vulnerable":26,"Criteria":68,"MatchCriteriaID":236,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},{"Vulnerable":26,"Criteria":71,"MatchCriteriaID":238,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},{"Operator":223,"Negate":26,"Nodes":252},[253,259],{"Operator":200,"Negate":26,"CPEMatch":254},[255,257],{"Vulnerable":4,"Criteria":80,"MatchCriteriaID":256,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"6BBD7A51-0590-4DDF-8249-5AFA8D645CB6",{"Vulnerable":4,"Criteria":83,"MatchCriteriaID":258,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"BB28F9AF-3D06-4532-B397-96D7E4792503",{"Operator":200,"Negate":26,"CPEMatch":260},[261],{"Vulnerable":26,"Criteria":71,"MatchCriteriaID":238,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},[],[],{"lastModified":11,"cacheTime":265,"version":32},1792349831649,{"score":267,"band":268,"action":269,"scoredAt":270},45,"Medium","Plan remediation","2026-10-16T06:43:13.0265+00:00"]