受影响的版本系列
已知漏洞
| CVE | 标题 | 受影响版本 | CVSS | 被利用 | EPSS | 发布日期 |
|---|---|---|---|---|---|---|
| CVE-2026-63663 | CloudBeaver: Path Traversal in updateResultsDataBatch Allows Unauthorized Server File Stream Access | * | 6.5 | — | 2026-11-07 | |
| CVE-2026-63664 | CloudBeaver: Authorization Bypass (BFLA) - Data Export Restriction Bypass | * | 6.5 | — | 2026-11-07 | |
| CVE-2026-55449 | CloudBeaver: Path Traversal in Resource Manager getProjectPath allows directory enumeration outside shared-pro... | * | 5.3 | — | 2026-11-07 | |
| CVE-2026-108745 | CloudBeaver through 25.3.5 Missing Authorization via /api/sql-result-value Servlet | ≤ 25.3.5 | 2.3 | — | 2026-10-11 | |
| CVE-2026-108742 | CloudBeaver through 25.3.5 Missing Authorization via initConnection GraphQL Mutation | ≤ 25.3.5 | 5.3 | — | 2026-10-11 |
数据来源:CVE List(CVE® Program)、NVD、CISA KEV、FIRST EPSS(EPSS 详见 https://www.first.org/epss)、endoflife.date。软件列表:awesome-selfhosted(CC BY-SA 3.0)。