CVE:CVE-2020-25638
CNNVD:CNNVD-202011-1706
Red Hat Hibernate ORM是美国红帽（Red Hat）公司的一款用于编写应用程序的对象/关系映射（ORM）框架。
Hibernate ORM 存在SQL注入漏洞，攻击者可利用该漏洞通过Hibernate ORM的注释使用SQL注入来读取或修改数据。
solution:Upgrade hibernate hibernate_orm to a higher version than 5.3.20,5.4.24,and avoid the version (,5.3.20),[5.4.0,5.4.24); Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade quarkus quarkus to a higher version than 1.9.2,and avoid the version (,1.9.2]; Upgrade oracle communications_cloud_native_core_console to a higher version than 1.9.0,and avoid the version 1.9.0; Upgrade oracle retail_customer_management_and_segmentation_foundation to a higher version than 19.0,and avoid the version 19.0