datahub kayıtları
datahub üreticisine ait 9 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %33,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-287 Improper Authentication2
- CWE-295 Improper Certificate Validation1
- CWE-502 Deserialization of Untrusted Data1
- CWE-613 Insufficient Session Expiration1
- CWE-755 Improper Handling of Exceptional Conditions1
- CWE-913 Improper Control of Dynamically-Managed Code Resources1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
9 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2022-39366İstismar yok | DataHub missing JWT signature checkdatahub · datahub · CWE-287 | Kritik9,8 | — | %0,9 | 28 Eki 2022 |
39İzleyin | CVE-2023-25560İstismar yok | JSON Injection in DataHubdatahub · datahub · CWE-913 | Kritik9,8 | — | %0,6 | 10 Şub 2023 |
39İzleyin | CVE-2023-25561İstismar yok | Login fail open on JAAS misconfiguration in DataHubdatahub · datahub · CWE-755 | Kritik9,8 | — | %0,4 | 10 Şub 2023 |
39İzleyin | CVE-2023-25562İstismar yok | Failure to Invalidate Session on Logout in DataHubdatahub · datahub · CWE-613 | Kritik9,8 | — | %0,4 | 10 Şub 2023 |
36İzleyin | CVE-2023-25557İstismar yok | Server-Side Request Forgery in DataHubdatahub · datahub · CWE-918 | Kritik9,1 | — | %0,7 | 10 Şub 2023 |
36İzleyin | CVE-2024-29037İstismar yok | Default secret use for initial deploymentdatahub · datahub-helm · CWE-1394 | Kritik9,1 | — | %0,6 | 20 Mar 2024 |
32İzleyin | CVE-2023-25559İstismar yok | System account impersonation in DataHubdatahub · datahub · CWE-287 | Yüksek8,1 | — | %0,5 | 10 Şub 2023 |
30İzleyin | CVE-2026-25644İstismar yok | DataHub's LDAP Ingestion Source vulnerable to MITM attack through TLS downgradedatahub · datahub · CWE-295 | Yüksek7,5 | — | %0,4 | 6 Şub 2026 |
28İzleyin | CVE-2026-44501İstismar yok | DataHub OIDC REDIRECT_URL Cookie Deserialization Vulnerabilitydatahub · datahub · CWE-502 | Yüksek7,1 | — | %0,2 | 14 May 2026 |
- CVE-2022-3936639İzleyin
DataHub missing JWT signature check
KritikCVSS 9,8İstismar yokEPSS %1datahub · datahub28 Eki 2022
- CVE-2023-2556039İzleyin
JSON Injection in DataHub
KritikCVSS 9,8İstismar yokEPSS %1datahub · datahub10 Şub 2023
- CVE-2023-2556139İzleyin
Login fail open on JAAS misconfiguration in DataHub
KritikCVSS 9,8İstismar yokEPSS %0datahub · datahub10 Şub 2023
- CVE-2023-2556239İzleyin
Failure to Invalidate Session on Logout in DataHub
KritikCVSS 9,8İstismar yokEPSS %0datahub · datahub10 Şub 2023
- CVE-2023-2555736İzleyin
Server-Side Request Forgery in DataHub
KritikCVSS 9,1İstismar yokEPSS %1datahub · datahub10 Şub 2023
- CVE-2024-2903736İzleyin
Default secret use for initial deployment
KritikCVSS 9,1İstismar yokEPSS %1datahub · datahub-helm20 Mar 2024
- CVE-2023-2555932İzleyin
System account impersonation in DataHub
YüksekCVSS 8,1İstismar yokEPSS %1datahub · datahub10 Şub 2023
- CVE-2026-2564430İzleyin
DataHub's LDAP Ingestion Source vulnerable to MITM attack through TLS downgrade
YüksekCVSS 7,5İstismar yokEPSS %0datahub · datahub6 Şub 2026
- CVE-2026-4450128İzleyin
DataHub OIDC REDIRECT_URL Cookie Deserialization Vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0datahub · datahub14 May 2026