HD
Product
Hybrid Data Pipeline
2
CVEs
0
On KEV
8.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 0Low 0
Watch
Add Hybrid Data Pipeline to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-6504 | 8.4 | Jul 29 | In HDP Server versions below 4.6.2.2978 on Linux, unauthorized access could occur via IP spoofing using the X-Forwarded-For header. Since XFF is a client-controlled header, it… Affected: before 4.6.2.2978 |
| CVE-2025-6505 | 8.1 | Jul 29 | Unauthorized access and impersonation can occur in versions 4.6.2.3226 and below of Progress Software's Hybrid Data Pipeline Server on Linux Affected: before 4.6.2.3275 |
Showing 2
