Talend Data Catalog
5 CVEs affecting Talend Data Catalog. Latest disclosed: 2023-06-26. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-42837 | Critical | 9.8 | 2021-11-05 | An issue was discovered in Talend Data Catalog before 7.3-20210930. After setting up SAML/OAuth, authentication is not correctly enforced on the native login p… |
CVE-2023-36301 | High | 7.5 | 2023-06-26 | Talend Data Catalog before 8.0-20230221 contain a directory traversal vulnerability in HeaderImageServlet. |
CVE-2023-33247 | High | 7.5 | 2023-05-26 | Talend Data Catalog remote harvesting server before 8.0-20230413 contains a /upgrade endpoint that allows an unauthenticated WAR file to be deployed on the ser… |
CVE-2023-26264 | Medium | 5.5 | 2023-04-13 | All versions of Talend Data Catalog before 8.0-20220907 are potentially vulnerable to XML External Entity (XXE) attacks in the license parsing code. |
CVE-2023-26263 | Medium | 5.5 | 2023-04-13 | All versions of Talend Data Catalog before 8.0-20230110 are potentially vulnerable to XML External Entity (XXE) attacks in the /MIMBWebServices/license endpoin… |