İçeriğe atla
Noroxi

Talend kayıtları

talend üreticisine ait 17 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%5,9
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 20
  3. 21
  4. 22
  5. 23

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

17 kayıt
  • CVE-2014-2228
    40Planlayın

    The XStream extension in HP Fortify SCA before 2.2 RC3 allows remote attackers to execute arbitrary code via unsafe deserialization of XML m

    KritikCVSS 9,8İstismar yokEPSS %3

    talend · restlet19 Şub 2020

  • CVE-2021-42837
    39İzleyin

    An issue was discovered in Talend Data Catalog before 7.3-20210930.

    KritikCVSS 9,8İstismar yokEPSS %1

    talend · data catalog5 Kas 2021

  • CVE-2021-4311
    39İzleyin

    Talend Open Studio for MDM XML xml external entity reference

    KritikCVSS 9,8İstismar yokEPSS %1

    talend · open studio9 Oca 2023

  • CVE-2021-40684
    36İzleyin

    Talend ESB Runtime in all versions from 5.1 to 7.3.1-R2021-09, 7.2.1-R2021-09, 7.1.1-R2021-09, has an unauthenticated Jolokia HTTP endpoint

    KritikCVSS 9,1İstismar yokEPSS %1

    talend · esb runtime22 Eyl 2021

  • CVE-2012-2656
    31İzleyin

    An XML eXternal Entity (XXE) issue exists in Restlet 1.1.10 in an endpoint using XML transport, which lets a remote attacker obtain sensitiv

    YüksekCVSS 7,5İstismar yokEPSS %2

    talend · restlet18 Ara 2019

  • CVE-2022-45588
    31İzleyin

    All versions before R2022-09 of Talend's Remote Engine Gen 2 are potentially vulnerable to XML External Entity (XXE) type of attacks.

    YüksekCVSS 7,8İstismar yokEPSS %0

    talend · remote engine gen 23 Şub 2023

  • CVE-2023-36301
    30İzleyin

    Talend Data Catalog before 8.0-20230221 contain a directory traversal vulnerability in HeaderImageServlet.

    YüksekCVSS 7,5İstismar yokEPSS %1

    talend · data catalog26 Haz 2023

  • CVE-2023-31444
    30İzleyin

    In Talend Studio before 7.3.1-R2022-10 and 8.x before 8.0.1-R2022-09, microservices allow unauthenticated access to the Jolokia endpoint of

    YüksekCVSS 7,5İstismar yokEPSS %1

    talend · studio28 Nis 2023

  • CVE-2023-33247
    30İzleyin

    Talend Data Catalog remote harvesting server before 8.0-20230413 contains a /upgrade endpoint that allows an unauthenticated WAR file to be

    YüksekCVSS 7,5İstismar yokEPSS %0

    talend · data catalog26 May 2023

  • CVE-2022-45589
    28İzleyin

    All versions before 8.0.1-R2022-10-RT and 7.3.1-R2022-09-RT of the Talend ESB Runtime are potentially vulnerable to SQL Injection attacks in

    YüksekCVSS 7,2İstismar yokEPSS %1

    talend · esb runtime6 Şub 2023

  • CVE-2022-29943
    26İzleyin

    Talend Administration Center has a vulnerability that allows an authenticated user to use XML External Entity (XXE) processing to achieve re

    OrtaCVSS 6,5İstismar yokEPSS %1

    talend · administration center4 May 2022

  • CVE-2022-29942
    26İzleyin

    Talend Administration Center has a vulnerability that allows an authenticated user to use the Service Registry 'Add' functionality to perfor

    OrtaCVSS 6,5İstismar yokEPSS %1

    talend · administration center4 May 2022

  • CVE-2022-31648
    24İzleyin

    Talend Administration Center is vulnerable to a reflected Cross-Site Scripting (XSS) issue in the SSO login endpoint.

    OrtaCVSS 6,1İstismar yokEPSS %1

    talend · administration center26 May 2022

  • CVE-2023-26263
    22İzleyin

    All versions of Talend Data Catalog before 8.0-20230110 are potentially vulnerable to XML External Entity (XXE) attacks in the /MIMBWebServi

    OrtaCVSS 5,5İstismar yokEPSS %0

    talend · data catalog13 Nis 2023

  • CVE-2023-26264
    22İzleyin

    All versions of Talend Data Catalog before 8.0-20220907 are potentially vulnerable to XML External Entity (XXE) attacks in the license parsi

    OrtaCVSS 5,5İstismar yokEPSS %0

    talend · data catalog13 Nis 2023

  • CVE-2022-30332
    21İzleyin

    In Talend Administration Center 7.3.1.20200219 before TAC-15950, the Forgot Password feature provides different error messages for invalid r

    OrtaCVSS 5,3İstismar yokEPSS %1

    talend · administration center10 Oca 2023

  • CVE-2022-4818
    17İzleyin

    Talend Open Studio for MDM SystemStorageWrapper.java xml external entity reference

    OrtaCVSS 4,3İstismar yokEPSS %1

    talend · open studio for mdm28 Ara 2022