JPA, as a persistence solution for Java, can directly map objects to relational databases. In this paper, we present the structure of Java component vulnerability database, the methods to acquire Java component data and vulnerability information, and methods to achieve the component database using JPA, especially procedures storing the component data based on hierarchical structure for the component data.