CVE record · 1 source
CVE-2026-97849
The embedded Derby network service ignores its configured bind address and listens on all network interfaces.
- Vendor
- Apache Software Foundation
- Product
- Apache TomEE
- Weakness
- CWE-1327
- Exposure class
- Web platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
The embedded Derby network service ignores its configured bind address and listens on all network interfaces.
The embedded Derby network service ignores its configured bind address and listens on all network interfaces. When the service is enabled, a remote attacker with network access can connect to the database server and read or…