CVE-2006-7216

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-07-05 · updated 2026-06-16

Description

Apache Derby before 10.2.1.6 does not determine privilege requirements for lock table statements at compilation time, and consequently does not enforce privilege requirements at execution time, which allows remote authenticated users to lock arbitrary tables.

Affected products

Apache Software Foundation Apache Derby: 10.1.1.0, 10.1.2.1, 10.1.3.1

References

http://db.apache.org/derby/releases/release-10.2.1.6.html
http://issues.apache.org/jira/browse/DERBY-1708
http://db.apache.org/derby/releases/release-10.2.1.6.html
http://issues.apache.org/jira/browse/DERBY-1708

Get alerted when CVE-2006-7216 or the next vulnerability affects your stack