Skip to content
OpenAdvisories

Product · Progress Software

Hybrid Data Pipeline

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2025-6505

    Unauthorized access and impersonation can occur in versions 4.6.2.3226 and below of Progress Software's Hybrid Data Pip…

    Progress Software Hybrid Data Pipeline
  • High 8.4
    CVE-2025-6504

    Possibilities of IP Spoofing via X-Forwarded-For (XFF) Header

    In HDP Server versions below 4.6.2.2978 on Linux, unauthorized access could occur via IP spoofing using the X-Forwarded-For header.  Since XFF is a client-controlled header, it could be spoofed, allowing unauthorized access if the spoofed IP matched a whiteli…

    Progress Software Hybrid Data Pipeline