H2database

H2database is an embedded relational database engine widely integrated into Java applications and frameworks, where its lightweight footprint and permissive default configurations create a concentrated attack surface. Vulnerabilities affecting the product skew strongly toward critical severity and frequently acquire public exploit code, with the recurrent weakness classes—including cleartext storage of sensitive information, unsafe deserialization, improper input validation, link-following flaws, and argument injection—reflecting both the parser complexity of SQL processing and the risky defaults endemic to embedded database engines. Defenders should treat H2 instances as high-priority targets, particularly where exposed to untrusted input or where application code dynamically constructs database commands; current severity and exploitation counts are shown alongside this summary.