Skip to content
Noroxi

datahub records

9 published records for vendor datahub.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
33.3%
Median publish → KEV
No record has entered KEV

Records by year

  1. 22
  2. 23
  3. 24
  4. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

9 records
  • CVE-2022-39366
    39Monitor

    DataHub missing JWT signature check

    CriticalCVSS 9.8No exploitEPSS 1%

    datahub · datahubOct 28, 2022

  • CVE-2023-25560
    39Monitor

    JSON Injection in DataHub

    CriticalCVSS 9.8No exploitEPSS 1%

    datahub · datahubFeb 10, 2023

  • CVE-2023-25561
    39Monitor

    Login fail open on JAAS misconfiguration in DataHub

    CriticalCVSS 9.8No exploitEPSS 0%

    datahub · datahubFeb 10, 2023

  • CVE-2023-25562
    39Monitor

    Failure to Invalidate Session on Logout in DataHub

    CriticalCVSS 9.8No exploitEPSS 0%

    datahub · datahubFeb 10, 2023

  • CVE-2023-25557
    36Monitor

    Server-Side Request Forgery in DataHub

    CriticalCVSS 9.1No exploitEPSS 1%

    datahub · datahubFeb 10, 2023

  • CVE-2024-29037
    36Monitor

    Default secret use for initial deployment

    CriticalCVSS 9.1No exploitEPSS 1%

    datahub · datahub-helmMar 20, 2024

  • CVE-2023-25559
    32Monitor

    System account impersonation in DataHub

    HighCVSS 8.1No exploitEPSS 1%

    datahub · datahubFeb 10, 2023

  • CVE-2026-25644
    30Monitor

    DataHub's LDAP Ingestion Source vulnerable to MITM attack through TLS downgrade

    HighCVSS 7.5No exploitEPSS 0%

    datahub · datahubFeb 6, 2026

  • CVE-2026-44501
    28Monitor

    DataHub OIDC REDIRECT_URL Cookie Deserialization Vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    datahub · datahubMay 14, 2026