Talend Luki w zabezpieczeniach

Oś czasu

Rodzaj

Not Defined	14

Produkt

Talend Data Catalog	4
Talend ESB Runtime	2
Talend Open Studio for MDM	2
Talend TPS-5189	2
Talend TPS-5175	2

Przeciwdziałanie

Official Fix	13
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	1

Wykorzystywanie

High	0
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	14

Wektor dostępu

Not Defined	0
Physical	0
Local	0
Adjacent	6
Network	8

Uwierzytelnianie

Not Defined	0
High	0
Low	10
None	4

Interakcja z użytkownikiem

Not Defined	0
Required	1
None	13

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	1
≤5	1
≤6	3
≤7	3
≤8	5
≤9	1
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	1
≤5	2
≤6	3
≤7	3
≤8	4
≤9	1
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	1
≤5	1
≤6	6
≤7	2
≤8	4
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	1
≤6	0
≤7	0
≤8	3
≤9	0
≤10	4

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	2
≤7	0
≤8	0
≤9	0
≤10	0

Sprzedawca

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	1
<2k	12
<5k	1
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Wykorzystaj dzisiaj

<1k	14
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (12): Data Catalog (4), Data Catalog Remote Harvesting Server (1), ESB Runtime (2), Open Studio for MDM (2), Remote Engine Gen 2 (1), Studio (1), TPS-5175 (2), TPS-5189 (2), TPS-5201 (2), TPS-5233 (1), TPS-5235 (1), TPS-5324 (1)

Opublikowano	Base	Temp	Słaby punkt	Prod	Wyk	Prz	EPSS	CTI	CVE
2023-06-26	6.5	6.4	Talend Data Catalog HeaderImageServlet directory traversal	Nieznany	Not Defined	Official Fix	0.00090	0.02	CVE-2023-36301
2023-05-27	7.4	7.2	Talend Data Catalog Remote Harvesting Server WAR File upgrade privilege escalation	Nieznany	Not Defined	Official Fix	0.00048	0.00	CVE-2023-33247
2023-04-29	7.4	7.2	Talend Studio Microservices weak authentication	Nieznany	Not Defined	Official Fix	0.00146	0.00	CVE-2023-31444
2023-04-14	5.5	5.3	Talend Data Catalog License Parser XML External Entity	Nieznany	Not Defined	Official Fix	0.00056	0.00	CVE-2023-26264
2023-04-14	6.3	6.0	Talend Data Catalog license XML External Entity	Nieznany	Not Defined	Official Fix	0.00052	0.00	CVE-2023-26263
2023-02-07	7.6	7.6	Talend ESB Runtime Provisioning Service sql injection	Nieznany	Not Defined	Not Defined	0.00074	0.00	CVE-2022-45589
2023-02-04	8.0	7.9	Talend Remote Engine Gen 2 XML External Entity	Nieznany	Not Defined	Official Fix	0.00043	0.00	CVE-2022-45588
2023-01-09	6.9	6.9	Talend Open Studio for MDM XML XML External Entity	Nieznany	Not Defined	Official Fix	0.00155	0.15	CVE-2021-4311
2022-12-28	5.1	5.0	Talend Open Studio for MDM SystemStorageWrapper.java XML External Entity	Nieznany	Not Defined	Official Fix	0.00098	0.12	CVE-2022-4818
2022-05-27	3.5	3.4	Talend TPS-5233/TPS-5324/TPS-5235 SSO Login Endpoint cross site scripting	Nieznany	Not Defined	Official Fix	0.00078	0.00	CVE-2022-31648

4 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 4 results.

◂ PoprzedniPrzeglądKolejny ▸

Interested in the pricing of exploits?

See the underground prices here!