CData

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

CData records in CISA KEV

No CData vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Api Server 1 record LOW Arc 1 record HIGH Fd1104 Firmware 1 record MEDIUM

Records

9 records

TI-2024-20969 CVE-2024-31849 · GHSA-f3hc-9q6r-j846

Path traversal in CData Connect

HIGH 82

A path traversal vulnerability exists in the Java version of CData Connect < 23.4.8846 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain complete administrative ac…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06076 Published 2024-04-05 Fixed in 23.4.8846 CWE-22

TI-2024-20968 CVE-2024-31848 · GHSA-cjgj-qv8v-fhgh

Path traversal in CData API Server

HIGH 82

A path traversal vulnerability exists in the Java version of CData API Server < 23.4.8844 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain complete administrative…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08086 Published 2024-04-05 Fixed in 23.4.8844 CWE-22

TI-2024-20971 CVE-2024-31851 · GHSA-225x-44w7-hh2f

Path traversal in CData Sync

HIGH 76

A path traversal vulnerability exists in the Java version of CData Sync < 23.4.8843 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain access to sensitive informati…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.02885 Published 2024-04-05 Fixed in 23.4.8843 CWE-22

TI-2024-20970 CVE-2024-31850 · GHSA-wfw8-wpjj-mf7v

Path traversal in CData Arc

HIGH 76

A path traversal vulnerability exists in the Java version of CData Arc < 23.4.8839 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain access to sensitive informatio…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.03037 Published 2024-04-05 Fixed in 23.4.8839 CWE-22

TI-2022-03898 CVE-2022-4257 · GHSA-jvx4-vmw6-g8xc

C-DATA Web Management System GET Parameter jumpto.php argument injection

HIGH 75

A vulnerability was found in C-DATA Web Management System.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.4393 Published 2022-12-01 No fix listed CWE-707

TI-2023-09948 CVE-2023-24243 · GHSA-9xwx-qcqw-ppm5

CData RSB Connect v22.0.8336 was discovered to contain a Server-Side Request Forgery (SSRF).

HIGH 72

CData RSB Connect v22.0.8336 was discovered to contain a Server-Side Request Forgery (SSRF).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03995 Published 2023-06-16 No fix listed CWE-918

TI-2020-17549 CVE-2020-29056 · GHSA-3496-765w-5xgq

An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016…

MEDIUM 46

An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02018 Published 2020-11-24 No fix listed CWE-78

TI-2023-03092 CVE-2023-3305 · GHSA-w3gq-j6r5-7rw6

C-DATA Web Management System User Creation access control

LOW 34

A vulnerability was found in C-DATA Web Management System up to 20230607.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00758 Published 2023-06-18 No fix listed CWE-284

TI-2025-08500 CVE-2025-9273 · GHSA-p4rq-6jpq-3wqj

CData API Server MySQL Misconfiguration Information Disclosure Vulnerability

LOW 20

CData API Server MySQL Misconfiguration Information Disclosure Vulnerability.

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0039 Published 2025-09-02 No fix listed CWE-552

Open these records in search →

Critical	4
High	4
Medium	1
Low	0
No CVSS	0