Threats affecting pkg:maven/org.apache.openejb/openejb-derbynet

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-97849Apache TomEE · Binding to an Unrestricted IP Address High2026-11-10CVE Database V5CVE-2026-97849 Apache TomEE's embedded Derby network service ignores its configured bind address and listens on all network interfaces. This allows remote attackers with network access to connect to the database server and read or modify data. The issue is fixed in versions 10.3.0 and 11.0.0-M2. Vulnerability Apache Software Foundation CWE-1327	CVE Database V5	2026-11-10

Page 1 of 1