Talend Vulnerabilidad

Cronología

Escribe

Not Defined	14

Producto

Talend Data Catalog	4
Talend ESB Runtime	2
Talend Open Studio for MDM	2
Talend TPS-5189	2
Talend TPS-5175	2

Contramedidas

Official Fix	13
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	1

Explotabilidad

High	0
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	14

Vector de acceso

Not Defined	0
Physical	0
Local	0
Adjacent	6
Network	8

Autenticación

Not Defined	0
High	0
Low	10
None	4

La interacción del usuario

Not Defined	0
Required	1
None	13

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	1
≤5	1
≤6	3
≤7	3
≤8	5
≤9	1
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	1
≤5	2
≤6	3
≤7	3
≤8	4
≤9	1
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	1
≤5	1
≤6	6
≤7	2
≤8	4
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	1
≤6	0
≤7	0
≤8	3
≤9	0
≤10	4

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	2
≤7	0
≤8	0
≤9	0
≤10	0

Proveedor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Explotar día 0

<1k	1
<2k	12
<5k	1
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Explotar hoy

<1k	14
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Products (12): Data Catalog (4), Data Catalog Remote Harvesting Server (1), ESB Runtime (2), Open Studio for MDM (2), Remote Engine Gen 2 (1), Studio (1), TPS-5175 (2), TPS-5189 (2), TPS-5201 (2), TPS-5233 (1), TPS-5235 (1), TPS-5324 (1)

Fecha de publicación	Base	Temp	Vulnerabilidad	Prod	Exp	Con	EPSS	CTI	CVE
2023-06-26	6.5	6.4	Talend Data Catalog HeaderImageServlet directory traversal	Desconocido	Not Defined	Official Fix	0.00090	0.02	CVE-2023-36301
2023-05-27	7.4	7.2	Talend Data Catalog Remote Harvesting Server WAR File upgrade escalada de privilegios	Desconocido	Not Defined	Official Fix	0.00048	0.00	CVE-2023-33247
2023-04-29	7.4	7.2	Talend Studio Microservices autenticación débil	Desconocido	Not Defined	Official Fix	0.00146	0.00	CVE-2023-31444
2023-04-14	5.5	5.3	Talend Data Catalog License Parser XML External Entity	Desconocido	Not Defined	Official Fix	0.00056	0.00	CVE-2023-26264
2023-04-14	6.3	6.0	Talend Data Catalog license XML External Entity	Desconocido	Not Defined	Official Fix	0.00052	0.00	CVE-2023-26263
2023-02-07	7.6	7.6	Talend ESB Runtime Provisioning Service sql injection	Desconocido	Not Defined	Not Defined	0.00074	0.00	CVE-2022-45589
2023-02-04	8.0	7.9	Talend Remote Engine Gen 2 XML External Entity	Desconocido	Not Defined	Official Fix	0.00043	0.00	CVE-2022-45588
2023-01-09	6.9	6.9	Talend Open Studio for MDM XML XML External Entity	Desconocido	Not Defined	Official Fix	0.00155	0.00	CVE-2021-4311
2022-12-28	5.1	5.0	Talend Open Studio for MDM SystemStorageWrapper.java XML External Entity	Desconocido	Not Defined	Official Fix	0.00098	0.05	CVE-2022-4818
2022-05-27	3.5	3.4	Talend TPS-5233/TPS-5324/TPS-5235 SSO Login Endpoint cross site scripting	Desconocido	Not Defined	Official Fix	0.00078	0.00	CVE-2022-31648

4 no se muestran más entradas

🔒 Login Required

You need to signup and login to see more of the remaining 4 results.

◂ AnteriorVisión De ConjuntoPróximo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!