PatchTheCVEorientdb vulnerabilities and fixes
Recent CVEs affecting orientdb, with upgrade or downgrade steps. 3 tracked.
orientdb has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-02-20. Highest priority: CVE-2019-25448 (score 33/100).
- CVE-2019-25449 MEDIUM 6.1 DOWNGRADE OrientDB 3.0.17 contains a reflected cross-site scripting vulnerability that allows attackers to inject malici
- CVE-2019-25448 MEDIUM 6.4 DOWNGRADE OrientDB 3.0.17 contains a stored cross-site scripting vulnerability that allows authenticated attackers to in
- CVE-2019-25447 MEDIUM 4.3 DOWNGRADE OrientDB 3.0.17 GA Community Edition contains cross-site request forgery vulnerabilities that allow attackers
FAQ
How do I fix orientdb vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is orientdb being exploited right now?
None of the tracked orientdb CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which orientdb CVE should I patch first?
CVE-2019-25448 currently ranks highest (33/100): OrientDB 3.0.17 contains a stored cross-site scripting vulnerability that allows authenticated attackers to in.