Heimdall Data vulnerabilities

Products

• Database Proxy 3

Latest Heimdall Data CVEs

Newest publication first

1. CVE-2026-18274 Heimdall Data Database Proxy uploadJar Directory Traversal Remote Code Execution Vulnerability

   Published 2026-08-20

   High·CVSS 7.2

   Heimdall Data Database Proxy uploadJar Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Heimdall Data Database Proxy. Authentication is required to exploit this vulnerability...

2. CVE-2026-12357 Heimdall Data Database Proxy generateFileContent CRLF Injection Remote Code Execution Vulnerability

   Published 2026-07-29

   High·CVSS 7.2

   Heimdall Data Database Proxy generateFileContent CRLF Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Heimdall Data Database Proxy. Authentication is required to exploit this vulnerab...

3. CVE-2025-12486 Heimdall Data Database Proxy Cross-Site Scripting Remote Code Execution Vulnerability

   Published 2025-11-06

   High·CVSS 8.8

   Heimdall Data Database Proxy Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Heimdall Data Database Proxy. Minimal user interaction is required to exploit this vulnerabilit...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.