CData kayıtları
cdata üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4
- CWE-552 Files or Directories Accessible to External Parties1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
- CWE-918 Server-Side Request Forgery (SSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2024-31848Kavram kanıtı | A path traversal vulnerability exists in the Java version of CData API Server < 23.4.8844 when running using the embedded Jetty server, whiccdata · api server · CWE-22 | Kritik9,8 | — | %8,1 | 5 Nis 2024 |
41Planlayın | CVE-2024-31849Kavram kanıtı | A path traversal vulnerability exists in the Java version of CData Connect < 23.4.8846 when running using the embedded Jetty server, which ccdata · connect · CWE-22 | Kritik9,8 | — | %6,1 | 5 Nis 2024 |
40Planlayın | CVE-2020-29056İstismar yok | An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104,cdata · fd1104 firmware · CWE-78 | Kritik9,8 | — | %2,0 | 24 Kas 2020 |
35İzleyin | CVE-2024-31850Kavram kanıtı | A path traversal vulnerability exists in the Java version of CData Arc < 23.4.8839 when running using the embedded Jetty server, which couldcdata · arc · CWE-22 | Yüksek8,6 | — | %3,0 | 5 Nis 2024 |
35İzleyin | CVE-2024-31851Kavram kanıtı | A path traversal vulnerability exists in the Java version of CData Sync < 23.4.8843 when running using the embedded Jetty server, which coulcdata · sync · CWE-22 | Yüksek8,6 | — | %2,9 | 5 Nis 2024 |
31İzleyin | CVE-2023-24243Kavram kanıtı | CData RSB Connect v22.0.8336 was discovered to contain a Server-Side Request Forgery (SSRF).cdata · arc · CWE-918 | Yüksek7,5 | — | %4,0 | 16 Haz 2023 |
17İzleyin | CVE-2025-9273İstismar yok | CData API Server MySQL Misconfiguration Information Disclosure Vulnerabilitycdata · api server · CWE-552 | Orta4,3 | — | %0,4 | 2 Eyl 2025 |
- CVE-2024-3184841Planlayın
A path traversal vulnerability exists in the Java version of CData API Server < 23.4.8844 when running using the embedded Jetty server, whic
KritikCVSS 9,8Kavram kanıtıEPSS %8cdata · api server5 Nis 2024
- CVE-2024-3184941Planlayın
A path traversal vulnerability exists in the Java version of CData Connect < 23.4.8846 when running using the embedded Jetty server, which c
KritikCVSS 9,8Kavram kanıtıEPSS %6cdata · connect5 Nis 2024
- CVE-2020-2905640Planlayın
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104,
KritikCVSS 9,8İstismar yokEPSS %2cdata · fd1104 firmware24 Kas 2020
- CVE-2024-3185035İzleyin
A path traversal vulnerability exists in the Java version of CData Arc < 23.4.8839 when running using the embedded Jetty server, which could
YüksekCVSS 8,6Kavram kanıtıEPSS %3cdata · arc5 Nis 2024
- CVE-2024-3185135İzleyin
A path traversal vulnerability exists in the Java version of CData Sync < 23.4.8843 when running using the embedded Jetty server, which coul
YüksekCVSS 8,6Kavram kanıtıEPSS %3cdata · sync5 Nis 2024
- CVE-2023-2424331İzleyin
CData RSB Connect v22.0.8336 was discovered to contain a Server-Side Request Forgery (SSRF).
YüksekCVSS 7,5Kavram kanıtıEPSS %4cdata · arc16 Haz 2023
- CVE-2025-927317İzleyin
CData API Server MySQL Misconfiguration Information Disclosure Vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0cdata · api server2 Eyl 2025