Use of Hibernate with HQL/SQL Query String Containing External Input

Every one of the 14 is a mark on the map. Named now: 1 to 14, most at risk first.

1. Landray OA Unauthenticated HQL Injection via wechatLoginHelper.doCVE-2024-58352Shenzhen Landray Software Co., Ltd. · CVSS 7.5 · 0.9% likely
2. Apache StreamPark: SQL injection vulnerabilityCVE-2024-48988Apache Software Foundation · CVSS 7.6 · 0.6% likely

   Apache

3. Eventer - WordPress Event & Booking Manager Plugin <= 3.9.9.2 - Authenticated (Subscriber+) SQL Injection via reg_idCVE-2025-0959imithemes · CVSS 8.8 · 0.4% likely

   Imithemes

4. Cisco Identity Services Engine Certificate Management SQL Injection VulnerabilityCVE-2026-76451Cisco · CVSS 4.9 · 0.4% likely

   Cisco

5. Cisco Identity Services Engine SQL Injection VulnerabilityCVE-2026-76450Cisco · CVSS 4.9 · 0.4% likely

   Cisco

6. CoreShop Vulnerable to SQL Injection via Admin ReportsCVE-2026-22242coreshop · CVSS 4.9 · 0.4% likely
7. CoreShop Vulnerable to SQL Injection via Admin customer-company-modifierCVE-2026-23959coreshop · CVSS 6.9 · 0.4% likely
8. HQL Injection vulnerability has been discovered in Opentext Flipper.CVE-2025-8052opentext · CVSS 1 · 0.4% likely

   OpenText

9. Erupt through 2.3.0 HQL Injection via linkTreeVal in Data Table APICVE-2026-111390erupts · CVSS 5.3 · 0.4% likely
10. CWE-564: SQL Injection: Hibernate vulnerability exists that could allow the injection of a malicious HQL query in the NetBotz database when a malicious user is logged into the Net…CVE-2026-13337Schneider Electric · CVSS 5.1 · 0.3% likely

    Schneider Electric

11. erupts erupt EruptJpaUtils.java geneEruptHqlOrderBy sql injectionCVE-2026-4594erupts · CVSS 7.3 · 0.3% likely
12. In TIM BPM Suite/ TIM FLOW through 9.1.2 multiple Hibernate Query Language injection vulnerabilities exist which allow a low privileged user to extract passwords of other users an…CVE-2025-67280Tim-Solutions · CVSS 5.4 · 0.2% likely
13. erupts erupt MCP Tool EruptDataQuery.java EruptDataQuery sql injectionCVE-2026-4593erupts · CVSS 6.3 · 0.2% likely
14. HPE NonStop TSQLEXE - Memory Corruption vulnerabilityCVE-2026-73796Hewlett Packard Enterprise · CVSS 4.4 · 0.1% likely

    Hewlett Packard Enterprise

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.