Weaknesses of type CWE-564

15 results

Injeção SQL em Hibernate

Ocorre quando dados não validados ou não parametrizados são concatenados diretamente em queries HQL (Hibernate Query Language) ou em SQL nativo executado via Hibernate, permitindo que um atacante injete código SQL malicioso. O framework não sanitiza automaticamente — a responsabilidade é do desenvolvedor usar queries parametrizadas.

Example

Um formulário de busca recebe um nome e o código faz `session.createQuery("FROM Usuario WHERE nome = '" + nomeBuscado + "'")`. Se nomeBuscado for `' OR '1'='1`, a query retorna todos os usuários. Pior: um atacante pode deletar tabelas ou roubar dados.

How to mitigate

Use HQL parametrizado com setParameter() ou setString(), ou SQL nativo com NamedParameterStatement. Exemplo: `session.createQuery("FROM Usuario WHERE nome = :nome").setParameter("nome", nomeBuscado)`. Nunca concatene entrada de usuário direto na query.

CVE-2026-40871HIGHmailcow: dockerized vulnerable to Second Order SQL Injection in quarantine category via APIEPSS 8.6%CVE-2024-58352HIGHLandray OA Unauthenticated HQL Injection via wechatLoginHelper.doEPSS 0.9%CVE-2024-48988HIGHApache StreamPark: SQL injection vulnerabilityEPSS 0.6%CVE-2025-0959HIGHEventer - WordPress Event & Booking Manager Plugin <= 3.9.9.2 - Authenticated (Subscriber+) SQL Injection via reg_idEPSS 0.4%CVE-2026-76451MEDIUMCisco Identity Services Engine Certificate Management SQL Injection VulnerabilityEPSS 0.4%CVE-2026-76450MEDIUMCisco Identity Services Engine SQL Injection VulnerabilityEPSS 0.4%CVE-2026-22242MEDIUMCoreShop Vulnerable to SQL Injection via Admin ReportsEPSS 0.4%CVE-2026-23959MEDIUMCoreShop Vulnerable to SQL Injection via Admin customer-company-modifierEPSS 0.4%CVE-2025-8052LOWHQL Injection vulnerability has been discovered in Opentext Flipper.EPSS 0.4%CVE-2026-111390MEDIUMErupt through 2.3.0 HQL Injection via linkTreeVal in Data Table APIEPSS 0.4%CVE-2026-13337MEDIUMCWE-564: SQL Injection: Hibernate vulnerability exists that could allow the injection of a malicious HQL query in the NetBotz database when EPSS 0.3%CVE-2026-4594MEDIUMerupts erupt EruptJpaUtils.java geneEruptHqlOrderBy sql injectionEPSS 0.3%CVE-2025-67280MEDIUMIn TIM BPM Suite/ TIM FLOW through 9.1.2 multiple Hibernate Query Language injection vulnerabilities exist which allow a low privileged userEPSS 0.2%CVE-2026-4593MEDIUMerupts erupt MCP Tool EruptDataQuery.java EruptDataQuery sql injectionEPSS 0.2%CVE-2026-73796MEDIUMHPE NonStop TSQLEXE - Memory Corruption vulnerabilityEPSS 0.1%