CVE:CVE-2019-14900
CNNVD:CNNVD-202005-667
Red Hat Hibernate ORM是美国红帽（Red Hat）公司的一款用于编写应用程序的对象/关系映射（ORM）框架。
Hibernate ORM 5.3.18之前版本、5.4.18之前版本和5.5.0.Beta1之前版本中的JPA Criteria API存在SQL注入漏洞。攻击者可利用该漏洞访问未授权的信息或进行进一步的攻击。
solution:Upgrade hibernate hibernate_orm to a higher version than 5.3.18,5.4.18,and avoid the version (,5.3.18),[5.4.0,5.4.18); Upgrade redhat build_of_quarkus to a higher version than -; Upgrade redhat decision_manager to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat fuse to a higher version than 7.8.0,and avoid the version (,7.8.0); Upgrade redhat jboss_data_grid to a higher version than 7.0.0,and avoid the version 7.0.0; Upgrade redhat jboss_enterprise_application_platform to a higher version than -,7.3,7.4,7.2,and avoid the version 7.3,7.4,7.2; Upgrade redhat jboss_middleware_text-only_advisories to a higher version than -; Upgrade redhat openstack to a higher version than 10,13,14,and avoid the version 10,13,14; Upgrade redhat single_sign-on to a higher version than -; Upgrade quarkus quarkus to a higher version than 1.5.2,and avoid the version (,1.5.2]