Skip to content

Product

Progress Software Hybrid Data Pipeline vulnerabilities

2 published CVES affecting Progress Software Hybrid Data Pipeline, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
2
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest Progress Software Hybrid Data Pipeline CVEs

Newest publication first

  1. CVE-2025-6505 Unauthorized access and impersonation can occur in versions 4.6.2.3226 and below of Progress Software's Hybrid Data Pipeline Server on Linux. This vulnerability allows attackers to combine credentials...

    Published
    HighCVSS 8.1 EPSS 0.39%

    Unauthorized access and impersonation can occur in versions 4.6.2.3226 and below of Progress Software's Hybrid Data Pipeline Server on Linux. This vulnerability allows attackers to combine credentials from different sources, potentially leading to client impersonation and unautho...

  2. CVE-2025-6504 Possibilities of IP Spoofing via X-Forwarded-For (XFF) Header

    Published
    HighCVSS 8.4 EPSS 0.20%

    In HDP Server versions below 4.6.2.2978 on Linux, unauthorized access could occur via IP spoofing using the X-Forwarded-For header. Since XFF is a client-controlled header, it could be spoofed, allowing unauthorized access if the spoofed IP matched a whitelisted range. This vulne...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.