{"id":"CVE-2003-0845","url":"https://www.cyber-defence.io/tools/cve/CVE-2003-0845","generatedAt":"2026-10-27T21:40:41.936Z","title":"Unknown vulnerability in the HSQLDB component in JBoss 3.2.1 and 3.0.8 on Java 1.4.x platforms, when running in the default configuration, allows remote attackers to conduct unauthorized activities and possibly execute arbitrary code via certain SQL…","description":"Unknown vulnerability in the HSQLDB component in JBoss 3.2.1 and 3.0.8 on Java 1.4.x platforms, when running in the default configuration, allows remote attackers to conduct unauthorized activities and possibly execute arbitrary code via certain SQL statements to (1) TCP port 1701 in JBoss 3.2.1, and (2) port 1476 in JBoss 3.0.8.","published":"2003-11-17T05:00:00.000Z","lastModified":"2026-06-16T22:03:04.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"2.0","score":7.5,"severity":"HIGH","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P"},"cwe":["CWE-89"],"affected":["jboss/jboss"],"epss":{"score":0.15424,"percentile":0.96767,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":true,"firstPublished":"2003-10-06","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":23221,"kind":"exploit","title":"JBoss 3.0.8/3.2.1 - HSQLDB Remote Command Injection","url":"https://www.exploit-db.com/exploits/23221","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/23221.txt","file":"exploits/multiple/remote/23221.txt","published":"2003-10-06","added":"2003-10-06","updated":"2012-12-08","author":"Marc Schoenefeld","type":"remote","platform":"multiple","port":null,"verified":true,"codes":["CVE-2003-0845","OSVDB-10094"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"https://www.securityfocus.com/bid/8773/info"}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 15.4%, higher than 97% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://marc.info/?l=bugtraq&m=106546044416498&w=2","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=106547728803252&w=2","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/27914","tags":["Not Applicable"],"source":"cve@mitre.org"},{"url":"http://sourceforge.net/docman/display_doc.php?docid=19314&group_id=22866","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2007-1048.html","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/8773","tags":["Patch","Third Party Advisory","VDB Entry","Vendor Advisory"],"source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11300","tags":["Tool Signature"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=106546044416498&w=2","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=106547728803252&w=2","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/27914","tags":["Not Applicable"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/docman/display_doc.php?docid=19314&group_id=22866","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2007-1048.html","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/8773","tags":["Patch","Third Party Advisory","VDB Entry","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11300","tags":["Tool Signature"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2003-0845","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}