« Back to list

Progress

Progress Datadirect Openaccess Jdbc Driver: vulnerabilities and CVEs

Progress Datadirect Openaccess Jdbc Driver has 2 published vulnerabilities, 2 of them in the last 12 months. 0 are rated critical and 0 are listed by CISA as actively exploited.

CVEs2
Last 12 months2
Critical0
Actively exploited0

All vulnerabilities in the catalogue →⭐ Follow this technology

Latest vulnerabilities

CVESeverityEPSSActive exploitationPublishedDescription
CVE-2025-10703High (8.6)0.30%—Nov 19, 2025
Improper Control of Generation of Code ('Code Injection') vulnerability in Progress DataDirect Connect for JDBC drivers, Progress DataDirect Open Access JDBC driver and Hybrid Data Pipeline allows Remote Code Inclusion.…
CVE-2025-10702High (8.6)0.30%—Nov 19, 2025
Improper Control of Generation of Code ('Code Injection') vulnerability in Progress DataDirect Connect for JDBC drivers, Progress DataDirect Open Access JDBC driver and Hybrid Data Pipeline allows Remote Code Inclusion.…

🎯 How it gets exploited (ATT&CK techniques)

  1. T1059 Command and Scripting Interpreter2
  2. T1210 Exploitation of Remote Services2

Number of CVEs of this technology mapped to each exploitation or primary-impact technique.

Other products by Progress