Code injection in Progress DataDirect Connect for JDBC for Amazon Redshift
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Code execution
- Confidentiality · integrity · availability
- Low · High · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-94.
Summary
Improper Control of Generation of Code ('Code Injection') vulnerability in Progress DataDirect Connect for JDBC drivers, Progress DataDirect Open Access JDBC driver and Hybrid Data Pipeline allows Remote Code Inclusion. The SpyAttribute connection option implemented by the DataDirect Connect for JDBC drivers, DataDirect Hybrid Data Pipeline JDBC driver and the DataDirect OpenAccess JDBC driver log=(file) construct allows the user to specify an arbitrary file for the JDBC driver to write its log information to. If an application allows an end user to specify a value for the SpyAttributes connection option then an attacker could cause java script to be written to a log file. If the log file was in the correct location with the correct extension, an application server could see that log file as a resource to be served. The attacker could fetch the resource from the server causing the java script to be executed. This issue affects: DataDirect Connect for JDBC for Amazon Redshift: through 6.0.0.001392, fixed in 6.0.0.001541 DataDirect Connect for JDBC for Apache Cassandra: through 6.0.0.000805, fixed in 6.0.0.000833 DataDirect Connect for JDBC for Hive: through 6.0.1.001499, fixed in 6.0.1.001628 DataDirect Connect for JDBC for Apache Impala: through 6.0.0.001155, fixed in 6.0.0.001279 DataDirect Connect for JDBC for Apache SparkSQL: through 6.0.1.001222, fixed in 6.0.1.001344 DataDirect Connect for JDBC Autonomous REST Connector: through 6.0.1.006961, fixed in 6.0.1.007063 DataDirect Connect for JDBC for DB2: through 6.0.0.000717, fixed in 6.0.0.000964 DataDirect Connect for JDBC for Google Analytics 4: through 6.0.0.000454, fixed in 6.0.0.000525 DataDirect Connect for JDBC for Google BigQuery: through 6.0.0.002279, fixed in 6.0.0.002410 DataDirect Connect for JDBC for Greenplum: through 6.0.0.001712, fixed in 6.0.0.001727 DataDirect Connect for JDBC for Informix: through 6.0.0.000690, fixed in 6.0.0.0851 DataDirect Connect for JDBC for Microsoft Dynamics 365: through 6.0.0.003161, fixed in 6.0.0.3198 DataDirect Connect for JDBC for Microsoft SQLServer: through 6.0.0.001936, fixed in 6.0.0.001957 DataDirect Connect for JDBC for Microsoft Sharepoint: through 6.0.0.001559, fixed in 6.0.0.001587 DataDirect Connect for JDBC for MongoDB: through 6.1.0.001654, fixed in 6.1.0.001669 DataDirect Connect for JDBC for MySQL: through 5.1.4.000330, fixed in 5.1.4.000364 DataDirect Connect for JDBC for Oracle Database: through 6.0.0.001747, fixed in 6.0.0.001776 DataDirect Connect for JDBC for Oracle Eloqua: through 6.0.0.001438, fixed in 6.0.0.001458 DataDirect Connect for JDBC for Oracle Sales Cloud: through 6.0.0.001225, fixed in 6.0.0.001316 DataDirect Connect for JDBC for Oracle Service Cloud: through 5.1.4.000298, fixed in 5.1.4.000309 DataDirect Connect for JDBC for PostgreSQL: through 6.0.0.001843, fixed in 6.0.0.001856 DataDirect Connect for JDBC for Progress OpenEdge: through 5.1.4.000187, fixed in 5.1.4.000189 DataDirect Connect for JDBC for Salesforce: through 6.0.0.003020, fixed in 6.0.0.003125 DataDirect Connect for JDBC for SAP HANA: through 6.0.0.000879, product retired DataDirect Connect for JDBC for SAP S/4 HANA: through 6.0.1.001818, fixed in 6.0.1.001858 DataDirect Connect for JDBC for Sybase ASE: through 5.1.4.000161, fixed in 5.1.4.000162 DataDirect Connect for JDBC for Snowflake: through 6.0.1.001821, fixed in 6.0.1.001856 DataDirect Hybrid Data Pipeline Server: through 4.6.2.3309, fixed in 4.6.2.3430 DataDirect Hybrid Data Pipeline JDBC Driver: through 4.6.2.0607, fixed in 4.6.2.1023 DataDirect Hybrid Data Pipeline On Premises Connector: through 4.6.2.1223, fixed in 4.6.2.1339 DataDirect Hybrid Data Pipeline Docker: through 4.6.2.3316, fixed in 4.6.2.3430 DataDirect OpenAccess JDBC Driver: through 8.1.0.0177, fixed in 8.1.0.0183 DataDirect OpenAccess JDBC Driver: through 9.0.0.0019, fixed in 9.0.0.0022
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Progress | DataDirect Connect for JDBC for Amazon Redshift | up to 6.0.0.001392 | 6.0.0.001541 | Patch available | CNA |
| Progress | DataDirect Connect for JDBC for Apache Cassandra | up to 6.0.0.000805 | 6.0.0.000833 | Patch available | CNA |
| Progress | DataDirect Connect for JDBC for Hive | up to 6.0.1.001499 | 6.0.1.001628 | Patch available | CNA |
| Progress | DataDirect Connect for JDBC for Apache Impala | up to 6.0.0.001155 | 6.0.0.1279 | Patch available | CNA |
| Progress | DataDirect Connect for JDBC for Apache SparkSQL | up to 6.0.1.001222 | 6.0.1.001344 | Patch available | CNA |
| Progress | DataDirect Connect for JDBC Autonomous REST Connector | up to 6.0.1.006961 | 6.0.1.007063 | Patch available | CNA |
| Progress | DataDirect Connect for JDBC for DB2 | up to 6.0.0.000717 | 6.0.0.000964 | Patch available | CNA |
| Progress | DataDirect Connect for JDBC for Google Analytics 4 | up to 6.0.0.000454 | 6.0.0.000525 | Patch available | CNA |
| Progress | DataDirect Connect for JDBC for Google BigQuery | up to 6.0.0.002279 | 6.0.0.002410 | Patch available | CNA |
| Progress | DataDirect Connect for JDBC for Greenplum | up to 6.0.0.001712 | 6.0.0.001727 | Patch available | CNA |
| Progress | DataDirect Connect for JDBC for Informix | up to 6.0.0.000690 | 6.0.0.000851 | Patch available | CNA |
| Progress | DataDirect Connect for JDBC for Microsoft Dynamics 365 | up to 6.0.0.003161 | 6.0.0.003198 | Patch available | CNA |
| Progress | DataDirect Connect for JDBC for Microsoft SQLServer | up to 6.0.0.001936 | 6.0.0.001957 | Patch available | CNA |
| Progress | DataDirect Connect for JDBC for Microsoft Sharepoint | up to 6.0.0.001559 | 6.0.0.001587 | Patch available | CNA |
| Progress | DataDirect Connect for JDBC for MongoDB | up to 6.1.0.001654 | 6.1.0.001669 | Patch available | CNA |
| Progress | DataDirect Connect for JDBC for MySQL | up to 5.1.4.000330 | 5.1.4.000364 | Patch available | CNA |
| Progress | DataDirect Connect for JDBC for Oracle Database | up to 6.0.0.001747 | 6.0.0.001776 | Patch available | CNA |
| Progress | DataDirect Connect for JDBC for Oracle Eloqua | up to 6.0.0.001438 | 6.0.0.001458 | Patch available | CNA |
| Progress | DataDirect Connect for JDBC for Oracle Sales Cloud | up to 6.0.0.001225 | 6.0.0.001316 | Patch available | CNA |
| Progress | DataDirect Connect for JDBC for Oracle Service Cloud | up to 5.1.4.000298 | 5.1.4.000309 | Patch available | CNA |
| Progress | DataDirect Connect for JDBC for PostgreSQL | up to 6.0.0.001843 | 6.0.0.001856 | Patch available | CNA |
| Progress | DataDirect Connect for JDBC for Progress OpenEdge | up to 5.1.4.000187 | 5.1.4.000189 | Patch available | CNA |
| Progress | DataDirect Connect for JDBC for Salesforce | up to 6.0.0.003020 | 6.0.0.003125 | Patch available | CNA |
| Progress | DataDirect Connect for JDBC for SAP HANA | up to 6.0.0.000879 | — | No fix listed | CNA |
| Progress | DataDirect Connect for JDBC for SAP S/4 HANA | up to 6.0.0.001818 | 6.0.1.001858 | Patch available | CNA |
| Progress | DataDirect Connect for JDBC for Sybase ASE | up to 5.1.4.000161 | 5.1.4.000162 | Patch available | CNA |
| Progress | DataDirect Connect for JDBC for Snowflake | up to 6.0.1.001821 | 6.0.1.001856 | Patch available | CNA |
| Progress | DataDirect Hybrid Data Pipeline Server | up to 4.6.2.3309 | 4.6.2.3430 | Patch available | CNA |
| Progress | DataDirect Hybrid Data Pipeline JDBC Driver | up to 4.6.2.0607 | 4.6.2.1023 | Patch available | CNA |
| Progress | DataDirect Hybrid Data Pipeline On Premises Connector | up to 4.6.2.1223 | 4.6.2.1339 | Patch available | CNA |
| Progress | DataDirect Hybrid Data Pipeline Docker | up to 4.6.2.3316 | 4.6.2.3430 | Patch available | CNA |
| Progress | DataDirect OpenAccess JDBC Driver | up to 8.1.0.0177 | 8.1.0.0183 | Patch available | CNA |
| Progress | DataDirect OpenAccess JDBC Driver | up to 9.0.0.0019 | 9.0.0.0022 | Patch available | CNA |
- DataDirect Connect for JDBC for Amazon Redshift VendorProgress Affected up to 6.0.0.001392 Fixed in 6.0.0.001541 Patch available CNA
- DataDirect Connect for JDBC for Apache Cassandra VendorProgress Affected up to 6.0.0.000805 Fixed in 6.0.0.000833 Patch available CNA
- DataDirect Connect for JDBC for Hive VendorProgress Affected up to 6.0.1.001499 Fixed in 6.0.1.001628 Patch available CNA
- DataDirect Connect for JDBC for Apache Impala VendorProgress Affected up to 6.0.0.001155 Fixed in 6.0.0.1279 Patch available CNA
- DataDirect Connect for JDBC for Apache SparkSQL VendorProgress Affected up to 6.0.1.001222 Fixed in 6.0.1.001344 Patch available CNA
- DataDirect Connect for JDBC Autonomous REST Connector VendorProgress Affected up to 6.0.1.006961 Fixed in 6.0.1.007063 Patch available CNA
- DataDirect Connect for JDBC for DB2 VendorProgress Affected up to 6.0.0.000717 Fixed in 6.0.0.000964 Patch available CNA
- DataDirect Connect for JDBC for Google Analytics 4 VendorProgress Affected up to 6.0.0.000454 Fixed in 6.0.0.000525 Patch available CNA
- DataDirect Connect for JDBC for Google BigQuery VendorProgress Affected up to 6.0.0.002279 Fixed in 6.0.0.002410 Patch available CNA
- DataDirect Connect for JDBC for Greenplum VendorProgress Affected up to 6.0.0.001712 Fixed in 6.0.0.001727 Patch available CNA
- DataDirect Connect for JDBC for Informix VendorProgress Affected up to 6.0.0.000690 Fixed in 6.0.0.000851 Patch available CNA
- DataDirect Connect for JDBC for Microsoft Dynamics 365 VendorProgress Affected up to 6.0.0.003161 Fixed in 6.0.0.003198 Patch available CNA
- DataDirect Connect for JDBC for Microsoft SQLServer VendorProgress Affected up to 6.0.0.001936 Fixed in 6.0.0.001957 Patch available CNA
- DataDirect Connect for JDBC for Microsoft Sharepoint VendorProgress Affected up to 6.0.0.001559 Fixed in 6.0.0.001587 Patch available CNA
- DataDirect Connect for JDBC for MongoDB VendorProgress Affected up to 6.1.0.001654 Fixed in 6.1.0.001669 Patch available CNA
- DataDirect Connect for JDBC for MySQL VendorProgress Affected up to 5.1.4.000330 Fixed in 5.1.4.000364 Patch available CNA
- DataDirect Connect for JDBC for Oracle Database VendorProgress Affected up to 6.0.0.001747 Fixed in 6.0.0.001776 Patch available CNA
- DataDirect Connect for JDBC for Oracle Eloqua VendorProgress Affected up to 6.0.0.001438 Fixed in 6.0.0.001458 Patch available CNA
- DataDirect Connect for JDBC for Oracle Sales Cloud VendorProgress Affected up to 6.0.0.001225 Fixed in 6.0.0.001316 Patch available CNA
- DataDirect Connect for JDBC for Oracle Service Cloud VendorProgress Affected up to 5.1.4.000298 Fixed in 5.1.4.000309 Patch available CNA
- DataDirect Connect for JDBC for PostgreSQL VendorProgress Affected up to 6.0.0.001843 Fixed in 6.0.0.001856 Patch available CNA
- DataDirect Connect for JDBC for Progress OpenEdge VendorProgress Affected up to 5.1.4.000187 Fixed in 5.1.4.000189 Patch available CNA
- DataDirect Connect for JDBC for Salesforce VendorProgress Affected up to 6.0.0.003020 Fixed in 6.0.0.003125 Patch available CNA
- DataDirect Connect for JDBC for SAP HANA VendorProgress Affected up to 6.0.0.000879 Fixed in — No fix listed CNA
- DataDirect Connect for JDBC for SAP S/4 HANA VendorProgress Affected up to 6.0.0.001818 Fixed in 6.0.1.001858 Patch available CNA
- DataDirect Connect for JDBC for Sybase ASE VendorProgress Affected up to 5.1.4.000161 Fixed in 5.1.4.000162 Patch available CNA
- DataDirect Connect for JDBC for Snowflake VendorProgress Affected up to 6.0.1.001821 Fixed in 6.0.1.001856 Patch available CNA
- DataDirect Hybrid Data Pipeline Server VendorProgress Affected up to 4.6.2.3309 Fixed in 4.6.2.3430 Patch available CNA
- DataDirect Hybrid Data Pipeline JDBC Driver VendorProgress Affected up to 4.6.2.0607 Fixed in 4.6.2.1023 Patch available CNA
- DataDirect Hybrid Data Pipeline On Premises Connector VendorProgress Affected up to 4.6.2.1223 Fixed in 4.6.2.1339 Patch available CNA
- DataDirect Hybrid Data Pipeline Docker VendorProgress Affected up to 4.6.2.3316 Fixed in 4.6.2.3430 Patch available CNA
- DataDirect OpenAccess JDBC Driver VendorProgress Affected up to 8.1.0.0177 Fixed in 8.1.0.0183 Patch available CNA
- DataDirect OpenAccess JDBC Driver VendorProgress Affected up to 9.0.0.0019 Fixed in 9.0.0.0022 Patch available CNA
Remediation
- Fix · CNA DataDirect Connect for JDBC for Amazon Redshift (Progress) Fixed in 6.0.0.001541
- Fix · CNA DataDirect Connect for JDBC for Apache Cassandra (Progress) Fixed in 6.0.0.000833
- Fix · CNA DataDirect Connect for JDBC for Hive (Progress) Fixed in 6.0.1.001628
- Fix · CNA DataDirect Connect for JDBC for Apache Impala (Progress) Fixed in 6.0.0.1279
- Fix · CNA DataDirect Connect for JDBC for Apache SparkSQL (Progress) Fixed in 6.0.1.001344
- Fix · CNA DataDirect Connect for JDBC Autonomous REST Connector (Progress) Fixed in 6.0.1.007063
- Fix · CNA DataDirect Connect for JDBC for DB2 (Progress) Fixed in 6.0.0.000964
- Fix · CNA DataDirect Connect for JDBC for Google Analytics 4 (Progress) Fixed in 6.0.0.000525
- Fix · CNA DataDirect Connect for JDBC for Google BigQuery (Progress) Fixed in 6.0.0.002410
- Fix · CNA DataDirect Connect for JDBC for Greenplum (Progress) Fixed in 6.0.0.001727
- Fix · CNA DataDirect Connect for JDBC for Informix (Progress) Fixed in 6.0.0.000851
- Fix · CNA DataDirect Connect for JDBC for Microsoft Dynamics 365 (Progress) Fixed in 6.0.0.003198
- Fix · CNA DataDirect Connect for JDBC for Microsoft SQLServer (Progress) Fixed in 6.0.0.001957
- Fix · CNA DataDirect Connect for JDBC for Microsoft Sharepoint (Progress) Fixed in 6.0.0.001587
- Fix · CNA DataDirect Connect for JDBC for MongoDB (Progress) Fixed in 6.1.0.001669
- Fix · CNA DataDirect Connect for JDBC for MySQL (Progress) Fixed in 5.1.4.000364
- Fix · CNA DataDirect Connect for JDBC for Oracle Database (Progress) Fixed in 6.0.0.001776
- Fix · CNA DataDirect Connect for JDBC for Oracle Eloqua (Progress) Fixed in 6.0.0.001458
- Fix · CNA DataDirect Connect for JDBC for Oracle Sales Cloud (Progress) Fixed in 6.0.0.001316
- Fix · CNA DataDirect Connect for JDBC for Oracle Service Cloud (Progress) Fixed in 5.1.4.000309
- Fix · CNA DataDirect Connect for JDBC for PostgreSQL (Progress) Fixed in 6.0.0.001856
- Fix · CNA DataDirect Connect for JDBC for Progress OpenEdge (Progress) Fixed in 5.1.4.000189
- Fix · CNA DataDirect Connect for JDBC for Salesforce (Progress) Fixed in 6.0.0.003125
- Fix · CNA DataDirect Connect for JDBC for SAP S/4 HANA (Progress) Fixed in 6.0.1.001858
- Fix · CNA DataDirect Connect for JDBC for Sybase ASE (Progress) Fixed in 5.1.4.000162
- Fix · CNA DataDirect Connect for JDBC for Snowflake (Progress) Fixed in 6.0.1.001856
- Fix · CNA DataDirect Hybrid Data Pipeline Server (Progress) Fixed in 4.6.2.3430
- Fix · CNA DataDirect Hybrid Data Pipeline JDBC Driver (Progress) Fixed in 4.6.2.1023
- Fix · CNA DataDirect Hybrid Data Pipeline On Premises Connector (Progress) Fixed in 4.6.2.1339
- Fix · CNA DataDirect Hybrid Data Pipeline Docker (Progress) Fixed in 4.6.2.3430
- Fix · CNA DataDirect OpenAccess JDBC Driver (Progress) Fixed in 8.1.0.0183
- Fix · CNA DataDirect OpenAccess JDBC Driver (Progress) Fixed in 9.0.0.0022
Timeline
- 2026-10-02 Threatist record created from CVE-2025-10703
- 2026-10-03 Alias added: GHSA-xrqq-74w4-x876
References
More Progress vulnerabilities
- TI-2026-07083 Command injection in Progress LoadMaster KEVCVSS 3.1CRITICAL 9.8
- TI-2024-06182 WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability KEVCVSS 3.1CRITICAL 9.8
- TI-2024-04541 WhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution Vulnerability KEVCVSS 3.1CRITICAL 9.8
- TI-2024-04060 Registration Authentication Bypass Vulnerability KEVCVSS 3.1CRITICAL 9.8
- TI-2024-01127 LoadMaster Pre-Authenticated OS Command Injection KEVCVSS 3.1CRITICAL 10.0
- TI-2023-20934 WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability KEVCVSS 3.1CRITICAL 10.0
Sources
- CVE-2025-10703 · CVE Program
- CVE-2025-10703 · NVD
- FIRST EPSS
- GHSA-xrqq-74w4-x876 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences