CVE-2019-14900

A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks.

• CWE-89

• https://bugzilla.redhat.com/show_bug.cgi?id=1666499Issue Tracking, Third Party Advisory
• https://lists.apache.org/thread.html/r833c1276e41334fa675848a08daf0c61f39009f9f9a400d9f7006d44%40%3Cdev.turbine.apache.org%3E
• https://security.netapp.com/advisory/ntap-20220210-0020/Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1666499Issue Tracking, Third Party Advisory
• https://lists.apache.org/thread.html/r833c1276e41334fa675848a08daf0c61f39009f9f9a400d9f7006d44%40%3Cdev.turbine.apache.org%3E
• https://security.netapp.com/advisory/ntap-20220210-0020/Third Party Advisory

Published

Jul 6, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-14895A heap-based buffer overflow was discovered in the Linux ker…9.8
• CVE-2019-14896A heap-based buffer overflow vulnerability was found in the …9.8
• CVE-2019-14897A stack-based buffer overflow was found in the Linux kernel,…9.8
• CVE-2019-14898The fix for CVE-2019-11599, affecting the Linux kernel befor…7
• CVE-2019-14899A vulnerability was discovered in Linux, FreeBSD, OpenBSD, M…7.4
• CVE-2019-1490A spoofing vulnerability exists when a Skype for Business Se…5.4
• CVE-2019-14901A heap overflow flaw was found in the Linux kernel, all vers…9.8
• CVE-2019-14902There is an issue in all samba 4.11.x versions before 4.11.5…5.4
• CVE-2019-14903Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-14904A flaw was found in the solaris_zone module from the Ansible…7.3
• CVE-2019-14905A vulnerability was found in Ansible Engine versions 2.9.x b…5.6
• CVE-2019-14906A flaw was found with the RHSA-2019:3950 erratum, where it d…9.8