Vulnerabilities > Teradata
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2019-01-21 | CVE-2019-6499 | Use of Hard-coded Credentials vulnerability in Teradata Viewpoint 16.20.00.02B80 Teradata Viewpoint before 14.0 and 16.20.00.02-b80 contains a hardcoded password of TDv1i2e3w4 for the viewpoint database account (in viewpoint-portal\conf\server.xml) that could potentially be exploited by malicious users to compromise the affected system. | 8.1 |
| 2017-05-23 | CVE-2015-5401 | Improper Input Validation vulnerability in Teradata Express and Teradata Gateway Teradata Gateway before 15.00.03.02-1 and 15.10.x before 15.10.00.01-1 and TD Express before 15.00.02.08_Sles10 and 15.00.02.08_Sles11 allow remote attackers to cause a denial of service (database crash) via a malformed CONFIG REQUEST message. | 7.5 |
| 2016-11-10 | CVE-2016-7490 | Link Following vulnerability in Teradata Studio Express 15.12.00.00 The installation script studioexpressinstall for Teradata Studio Express 15.12.00.00 creates files in /tmp insecurely. | 7.8 |
| 2016-11-10 | CVE-2016-7489 | Permissions, Privileges, and Access Controls vulnerability in Teradata Virtual Machine 15.10 Teradata Virtual Machine Community Edition v15.10's perl script /opt/teradata/gsctools/bin/t2a.pl creates files in /tmp in an insecure manner, this may lead to elevated code execution. | 9.8 |
| 2016-11-10 | CVE-2016-7488 | Permissions, Privileges, and Access Controls vulnerability in Teradata Virtual Machine 15.10 Teradata Virtual Machine Community Edition v15.10 has insecure file permissions on /etc/luminex/pkgmgr. | 7.8 |