Vulnerabilities > Talend > Critical

DATE CVE VULNERABILITY TITLE RISK
2023-02-06 CVE-2022-45589 SQL Injection vulnerability in Talend ESB Runtime 5.1/7.1.1R202109
All versions before 8.0.1-R2022-10-RT and 7.3.1-R2022-09-RT of the Talend ESB Runtime are potentially vulnerable to SQL Injection attacks in the provisioning service only.
network
low complexity
talend CWE-89
critical
9.8
2023-02-03 CVE-2022-45588 XXE vulnerability in Talend Remote Engine GEN 2
All versions before R2022-09 of Talend's Remote Engine Gen 2 are potentially vulnerable to XML External Entity (XXE) type of attacks.
network
low complexity
talend CWE-611
critical
9.8
2023-01-09 CVE-2021-4311 XXE vulnerability in Talend Open Studio
A vulnerability classified as problematic was found in Talend Open Studio for MDM.
network
low complexity
talend CWE-611
critical
9.8