CData Vulnerabilities and Affected Products
Vulnerabilities associated with Connect.
Products
Clear product- API Server2 vulnerabilities
- api_server1 vulnerability
- Arc1 vulnerability
- Connect1 vulnerability
- Sync1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-31849CRITICAL | CData Connect < 23.4.8846 - Path TraversalA path traversal vulnerability exists in the Java version of CData Connect < 23.4.8846 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain complete administrative access to the application. | CVSS9.8v3.1 | EPSS6.08% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |