Log in Start free

CData

Products

ProductCVEsExploitedLatest
API Server2–Sep 2, 2025
Arc1–Apr 5, 2024
Connect1–Apr 5, 2024
Sync1–Apr 5, 2024

Exploited and recent CVEs

  • CVE-2025-9273 Medium 4.3 CData API Server MySQL Misconfiguration Information Disclosure Vulnerability 0.4%
  • CVE-2024-31851 High 8.6 A path traversal vulnerability exists in the Java version of CData Sync < 23.4.8843 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain access to 2.9%
  • CVE-2024-31850 High 8.6 A path traversal vulnerability exists in the Java version of CData Arc < 23.4.8839 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain access to 3.0%
  • CVE-2024-31849 Critical 9.8 A path traversal vulnerability exists in the Java version of CData Connect < 23.4.8846 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain comple 6.1%
  • CVE-2024-31848 Critical 9.8 A path traversal vulnerability exists in the Java version of CData API Server < 23.4.8844 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain com 8.1%