CWE-564: CWE-564
Yearly Trend
Top Affected Vendors
All CWE-564 CVEs (6)
This SQL injection vulnerability in OpenText Flipper allows low-privilege users to execute arbitrary SQL queries through the HQL processor, potentiall...
Oct 20, 2025This SQL injection vulnerability in the Eventer WordPress plugin allows authenticated attackers with Subscriber-level access or higher to inject malic...
Mar 7, 2025This CVE describes an SQL injection vulnerability in Apache StreamPark's SpringBoot distribution package that allows authenticated attackers to execut...
Aug 22, 2025Multiple Hibernate Query Language injection vulnerabilities in TIM BPM Suite/TIM FLOW allow low-privileged authenticated users to extract other users'...
Jan 9, 2026An error-based SQL injection vulnerability in CoreShop's admin panel allows attackers to extract database information through crafted requests. This a...
Jan 22, 2026CoreShop versions before 4.1.8 contain a blind SQL injection vulnerability that allows authenticated administrator users to extract database contents ...
Jan 8, 2026About CWE-564 (CWE-564)
Our database tracks 6 CVEs classified as CWE-564, with 0 rated critical and 3 rated high severity. The average CVSS score for CWE-564 vulnerabilities is 6.7.
External reference: View CWE-564 on MITRE CWE →
Monitor CWE-564 Vulnerabilities
Get alerted when new CWE-564 CVEs affect your infrastructure.
Start Monitoring Free