TI-2021-19001 CVE-2021-42837 · GHSA-7m5q-x758-9ww3
An issue was discovered in Talend Data Catalog before 7.3-20210930.
Priority MEDIUM 44
An issue was discovered in Talend Data Catalog before 7.3-20210930.
Talend
Records20All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9
Exploited now
Talend records in CISA KEVNo Talend vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records in Data Catalog · all components
TI-2023-18194 CVE-2023-36301 · GHSA-vj66-8wh2-ggv7
Talend Data Catalog before 8.0-20230221 contain a directory traversal vulnerability in HeaderImageServlet.
Priority MEDIUM 41
Talend Data Catalog before 8.0-20230221 contain a directory traversal vulnerability in HeaderImageServlet.
TI-2023-16419 CVE-2023-33247 · GHSA-x79h-5263-4x77
Talend Data Catalog remote harvesting server before 8.0-20230413 contains a /upgrade…
Priority LOW 39
Talend Data Catalog remote harvesting server before 8.0-20230413 contains a /upgrade endpoint that allows an unauthenticated WAR file to be deployed on the server.
TI-2023-11426 CVE-2023-26264 · GHSA-rm8v-c7x4-4mrq
All versions of Talend Data Catalog before 8.0-20220907 are potentially vulnerable to XML…
Priority LOW 24
All versions of Talend Data Catalog before 8.0-20220907 are potentially vulnerable to XML External Entity (XXE) attacks in the license parsing code.
TI-2023-11425 CVE-2023-26263 · GHSA-63jf-339p-rvpm
All versions of Talend Data Catalog before 8.0-20230110 are potentially vulnerable to XML…
Priority LOW 24
All versions of Talend Data Catalog before 8.0-20230110 are potentially vulnerable to XML External Entity (XXE) attacks in the /MIMBWebServices/license endpoint of the remote harvesting server.