Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: dbeaver Clear all filters
TI-2026-70723 CVE-2026-108745 · GHSA-g5pc-84r5-pfr3

CloudBeaver missing authorization exposes other users' LOB exports

Priority LOW 11

CloudBeaver through 25.3.5 contains a missing authorization vulnerability in WebSQLResultServlet that allows any web session holder to read other users' LOB export files from a shared folder.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00207 Published 2026-10-11 No fix listed CWE-862
TI-2026-70721 CVE-2026-108742 · GHSA-362j-x75x-j27h

Missing authorization in DBeaver CloudBeaver initConnection mutation

Priority MEDIUM 57

CloudBeaver through 25.3.5 contains a missing authorization vulnerability in the initConnection GraphQL mutation that lets view-only shared-project members persist credentials without datasource-edit permission.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00247 Published 2026-10-11 No fix listed CWE-862