You've heard of SQL injection, but HPE has new research into Java server injection flaws that could represent an entirely new attack surface.

JFrog explained that the Java Naming and Directory Interface (JNDI) is an API that provides naming and directory functionality for Java applications. H2 is a widely-used open-source Java SQL ...

The JDBC API is implemented on the Java SE (formerly, J2SE) platform's java.sql package. If a connection is obtained from an application server, a datasource JNDI name is used to obtain a connection.