Cdata - vulnerabilities (CVEs)

7 CVEs in 6 products, 0 in the last 30 days, newest from 2025-09-02.

Products

CVE-2025-9273 - CVSS 4.3 (medium), 2025-09-02: CData API Server MySQL Misconfiguration Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on…
CVE-2024-31849 - CVSS 9.8 (critical), 2024-04-05: A path traversal vulnerability exists in the Java version of CData Connect < 23.4.8846 when running using the embedded Jetty server, which could allow an…
CVE-2024-31848 - CVSS 9.8 (critical), 2024-04-05: A path traversal vulnerability exists in the Java version of CData API Server < 23.4.8844 when running using the embedded Jetty server, which could allow an…
CVE-2024-31851 - CVSS 8.6 (high), 2024-04-05: A path traversal vulnerability exists in the Java version of CData Sync < 23.4.8843 when running using the embedded Jetty server, which could allow an…
CVE-2024-31850 - CVSS 8.6 (high), 2024-04-05: A path traversal vulnerability exists in the Java version of CData Arc < 23.4.8839 when running using the embedded Jetty server, which could allow an…
CVE-2023-24243 - CVSS 7.5 (high), 2023-06-16: CData RSB Connect v22.0.8336 was discovered to contain a Server-Side Request Forgery (SSRF).
CVE-2020-29056 - CVSS 9.8 (critical), 2020-11-24: An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S,…