OPeNDAP Inc.

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

OPeNDAP Inc. records in CISA KEV

No OPeNDAP Inc. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Bes 2 records LOW Hyrax 2 records LOW Server3 1 record MEDIUM

Records

4 records

TI-2007-02273 CVE-2007-2355 · GHSA-93g8-99xv-wchf

The get_url function in DODS_Dispatch.pm for the CGI_server in OPeNDAP 3 allows remote…

MEDIUM 52

The get_url function in DODS_Dispatch.pm for the CGI_server in OPeNDAP 3 allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05966 Published 2007-04-30 No fix listed

TI-2007-02680 CVE-2007-2769 · GHSA-jj5w-3whp-qx28

BES before 3.5.0 in OPeNDAP 4 (Hydrax) before 1.2.1 does not properly handle compressed…

LOW 38

BES before 3.5.0 in OPeNDAP 4 (Hydrax) before 1.2.1 does not properly handle compressed files, which allows remote attackers to upload arbitrary files or execute arbitrary commands via a crafted compressed file.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02659 Published 2007-05-21 No fix listed

TI-2007-02678 CVE-2007-2767 · GHSA-8whf-2phw-rrxr

Unspecified vulnerability in BES before 3.5.0 in OPeNDAP 4 (Hydrax) before 1.2.1 allows…

LOW 38

Unspecified vulnerability in BES before 3.5.0 in OPeNDAP 4 (Hydrax) before 1.2.1 allows remote attackers to list filesystem contents and obtain sensitive information via unknown vectors.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.02097 Published 2007-05-21 No fix listed

TI-2026-13884 CVE-2026-16637 · GHSA-7c9q-38r9-q62m

OPeNDAP Hyrax SSRF and Credential Disclosure via Unvalidated Redirects

LOW 29

OPeNDAP Hyrax allows SSRF and credential disclosure via unvalidated HTTP redirects that bypass the AllowedHosts allowlist and leak Earthdata headers (User-Id, Echo-Token) to attacker-controlled endpoints.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00457 Published 2026-08-07 No fix listed CWE-201

Open these records in search →

Critical	1
High	2
Medium	1
Low	0
No CVSS	0