Vendors / DTStack Records 7 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 2 CVSS 7.0–8.9
Exploited now DTStack records in CISA KEV No DTStack vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 72
An insecure permissions in /Taier/API/tenant/listTenant interface in DTStack Taier 1.3.0 allows attackers to view sensitive information via the getCookie method.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00631 · Published 2023-06-23 · No fix listed CWE-732
Priority HIGH 70
A vulnerability was found in DTStack Taier 1.4.0.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00615 · Published 2026-08-14 · No fix listed CWE-22
Priority HIGH 70
A vulnerability was determined in DTStack Taier up to 1.4.0.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00401 · Published 2026-06-09 · No fix listed CWE-287
Priority MEDIUM 57
A vulnerability has been found in DTStack Taier 1.4.0.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.02243 · Published 2026-05-25 · No fix listed CWE-77
Priority MEDIUM 56
A vulnerability was determined in DTStack Taier 1.4.0.
CVSS 4.0 MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00562 · Published 2026-08-14 · Fixed in 1.5.0 CWE-22
Priority MEDIUM 56
A vulnerability has been found in DTStack Taier 1.4.0.
CVSS 4.0 MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00507 · Published 2026-08-13 · Fixed in 1.5.0 CWE-22
Priority MEDIUM 43
Deserialization of Untrusted Data vulnerability in DTStack chunjun (chunjun-core/src/main/java/com/dtstack/chunjun/util modules).
CVSS 4.0 HIGH 8.7· Network · No auth · No interaction · EPSS 0.00283 · Published 2026-03-24 · Fixed CWE-502
Open these records in search → All records by CVSS severity
Critical0 High2 Medium5 Low0 No CVSS0