Skip to content
Noroxi

Talend records

17 published records for vendor talend.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
5.9%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 20
  3. 21
  4. 22
  5. 23

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

17 records
  • CVE-2014-2228
    40Plan

    The XStream extension in HP Fortify SCA before 2.2 RC3 allows remote attackers to execute arbitrary code via unsafe deserialization of XML m

    CriticalCVSS 9.8No exploitEPSS 3%

    talend · restletFeb 19, 2020

  • CVE-2021-42837
    39Monitor

    An issue was discovered in Talend Data Catalog before 7.3-20210930.

    CriticalCVSS 9.8No exploitEPSS 1%

    talend · data catalogNov 5, 2021

  • CVE-2021-4311
    39Monitor

    Talend Open Studio for MDM XML xml external entity reference

    CriticalCVSS 9.8No exploitEPSS 0%

    talend · open studioJan 9, 2023

  • CVE-2021-40684
    36Monitor

    Talend ESB Runtime in all versions from 5.1 to 7.3.1-R2021-09, 7.2.1-R2021-09, 7.1.1-R2021-09, has an unauthenticated Jolokia HTTP endpoint

    CriticalCVSS 9.1No exploitEPSS 1%

    talend · esb runtimeSep 22, 2021

  • CVE-2012-2656
    31Monitor

    An XML eXternal Entity (XXE) issue exists in Restlet 1.1.10 in an endpoint using XML transport, which lets a remote attacker obtain sensitiv

    HighCVSS 7.5No exploitEPSS 2%

    talend · restletDec 18, 2019

  • CVE-2022-45588
    31Monitor

    All versions before R2022-09 of Talend's Remote Engine Gen 2 are potentially vulnerable to XML External Entity (XXE) type of attacks.

    HighCVSS 7.8No exploitEPSS 0%

    talend · remote engine gen 2Feb 3, 2023

  • CVE-2023-36301
    30Monitor

    Talend Data Catalog before 8.0-20230221 contain a directory traversal vulnerability in HeaderImageServlet.

    HighCVSS 7.5No exploitEPSS 0%

    talend · data catalogJun 26, 2023

  • CVE-2023-31444
    30Monitor

    In Talend Studio before 7.3.1-R2022-10 and 8.x before 8.0.1-R2022-09, microservices allow unauthenticated access to the Jolokia endpoint of

    HighCVSS 7.5No exploitEPSS 0%

    talend · studioApr 28, 2023

  • CVE-2023-33247
    30Monitor

    Talend Data Catalog remote harvesting server before 8.0-20230413 contains a /upgrade endpoint that allows an unauthenticated WAR file to be

    HighCVSS 7.5No exploitEPSS 0%

    talend · data catalogMay 26, 2023

  • CVE-2022-45589
    28Monitor

    All versions before 8.0.1-R2022-10-RT and 7.3.1-R2022-09-RT of the Talend ESB Runtime are potentially vulnerable to SQL Injection attacks in

    HighCVSS 7.2No exploitEPSS 0%

    talend · esb runtimeFeb 6, 2023

  • CVE-2022-29943
    26Monitor

    Talend Administration Center has a vulnerability that allows an authenticated user to use XML External Entity (XXE) processing to achieve re

    MediumCVSS 6.5No exploitEPSS 0%

    talend · administration centerMay 4, 2022

  • CVE-2022-29942
    26Monitor

    Talend Administration Center has a vulnerability that allows an authenticated user to use the Service Registry 'Add' functionality to perfor

    MediumCVSS 6.5No exploitEPSS 0%

    talend · administration centerMay 4, 2022

  • CVE-2022-31648
    24Monitor

    Talend Administration Center is vulnerable to a reflected Cross-Site Scripting (XSS) issue in the SSO login endpoint.

    MediumCVSS 6.1No exploitEPSS 0%

    talend · administration centerMay 26, 2022

  • CVE-2023-26263
    22Monitor

    All versions of Talend Data Catalog before 8.0-20230110 are potentially vulnerable to XML External Entity (XXE) attacks in the /MIMBWebServi

    MediumCVSS 5.5No exploitEPSS 0%

    talend · data catalogApr 13, 2023

  • CVE-2023-26264
    22Monitor

    All versions of Talend Data Catalog before 8.0-20220907 are potentially vulnerable to XML External Entity (XXE) attacks in the license parsi

    MediumCVSS 5.5No exploitEPSS 0%

    talend · data catalogApr 13, 2023

  • CVE-2022-30332
    21Monitor

    In Talend Administration Center 7.3.1.20200219 before TAC-15950, the Forgot Password feature provides different error messages for invalid r

    MediumCVSS 5.3No exploitEPSS 0%

    talend · administration centerJan 10, 2023

  • CVE-2022-4818
    17Monitor

    Talend Open Studio for MDM SystemStorageWrapper.java xml external entity reference

    MediumCVSS 4.3No exploitEPSS 0%

    talend · open studio for mdmDec 28, 2022