Read the docs

Black Duck

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Black Duck records in CISA KEV

No Black Duck vulnerabilities are listed in CISA KEV.

Records

7 records

TI-2026-01191 CVE-2026-1496 · GHSA-gc4h-xc67-2w55

Coverity CLI Authentication Bypass

Priority MEDIUM 49

Vulnerable versions of Coverity Connect lack an error handler in the authentication logic for command line tooling that makes it vulnerable to an authentication bypass.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0055 Published 2026-03-27 Fixed in 2025.12.0, 2024.3.0A +20 CWE-639
TI-2026-07338 CVE-2026-8338 · GHSA-f3gv-992v-c3v5

Authentication and Authorization Bypass in Coverity Connect

Priority MEDIUM 42

A Spring Security authentication and authorization bypass exists in Coverity Connect versions between 2023.6.0 and 2026.3.0.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00501 Published 2026-07-29 Fixed in 2026.6.0 CWE-288
TI-2026-07339 CVE-2026-8339 · GHSA-9cc8-j46r-gq7j

SQL Injection in Coverity Connect SOAP API

Priority MEDIUM 40

A SQL injection vulnerability exists in the Coverity Connect SOAP API for versions between 2024.6.0 and 2026.3.0 (inclusive).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00344 Published 2026-07-29 Fixed in 2026.6.0 CWE-89
TI-2024-11153 CVE-2024-12021 · GHSA-wgw2-48jp-77f3

Stored cross-site scripting in Black Duck Coverity

Priority LOW 37

Coverity versions prior to 2024.9.0 are vulnerable to stored cross-site scripting (XSS) in various administrative interfaces.

CVSS 4.0HIGH 8.5 Network High privileges No interaction EPSS 0.00399 Published 2025-03-31 Fixed in 2024.9.0 CWE-79
TI-2026-53243 CVE-2026-76055 · GHSA-xgr7-5g33-wgpv

OS command injection in blackduck-c-cpp

Priority LOW 34

Improper Neutralization of Special Elements used in an OS Command in the package manager component of Black Duck blackduck-c-cpp before 3.0.7 allows an actor able to create a file within the scanned build directory to ex…

CVSS 4.0HIGH 7.5 Local No auth No interaction EPSS 0.00186 Published 2026-08-24 Fixed in 3.0.7 CWE-78
TI-2025-00418 CVE-2025-0504 · GHSA-2gw8-x645-qvjj

Black Duck SCA Project Privilege Escalation

Priority LOW 23

Black Duck SCA versions prior to 2025.10.0 had user role permissions configured in an overly broad manner.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00175 Published 2025-11-21 Fixed in 2025.10.0 CWE-266
Open these records in search →