CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2016-11023
Critical (9.8) in odata4j project odata4j. EPSS 1.4% chance of exploitation in the next 30 days.
odata4j 0.7.0 allows ExecuteCountQueryCommand.java SQL injection. NOTE: this product is apparently discontinued.
Severity
- EPSS
- 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
- CWE
- CWE-89
- Published
- Modified
- Record from
- the NVD, synced
Affected
- odata4j_project:odata4j
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-2382-qx5h-rvqh | Maven | org.odata4j:odata4j-core | <=0.7.0 | no fix published |
| GHSA-2382-qx5h-rvqh | Maven | org.odata4j:odata4j-dist | <=0.7.0 | no fix published |
| GHSA-2382-qx5h-rvqh | Maven | org.odata4j:odata4j-parent | <=0.7.0 | no fix published |