Vulnerability index

Browse CVEs

5 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

Data Science Studio CRITICAL 9.8

CVE-2023-51717

Dataiku DSS before 11.4.5 and 12.4.1 has Incorrect Access Control that could lead to a full authentication bypass.

Fix: 11.4.5 / 12.4.1+

Fix from $2,300 2024-01-09

Data Science Studio MEDIUM 6.5

CVE-2023-24045

In Dataiku DSS 11.2.1, an attacker can download other Dataiku files that were uploaded to the myfiles section by specifying the target username in a …

Fix: 11.3.2+

Fix from $1,600 2023-03-01

Data Science Studio MEDIUM 5.4

CVE-2021-27225

In Dataiku DSS before 8.0.6, insufficient access control in the Jupyter notebooks integration allows users (who have coding permissions) to read and …

Fix: 8.0.6+

Fix from $1,600 2021-03-01

Data Science Studio HIGH 8.1

CVE-2020-8817

Dataiku DSS before 6.0.5 allows attackers write access to the project to modify the "Created by" metadata.

Fix: 6.0.5+

Fix from $1,950 2020-09-14

Data Science Studio MEDIUM 5.3

CVE-2018-10732

The REST API in Dataiku DSS before 4.2.3 allows remote attackers to obtain sensitive information (i.e., determine if a username is valid) because of …

Fix: 4.2.3+

Fix from $1,600 2018-05-28