Vulnerabilities in dbeaver
6 resultsCVE-2021-3836CRITICALImproper Restriction of XML External Entity Reference in dbeaver/dbeaverEPSS 0.9%CVE-2026-108742MEDIUMCloudBeaver through 25.3.5 Missing Authorization via initConnection GraphQL MutationEPSS 0.2%CVE-2026-108745LOWCloudBeaver through 25.3.5 Missing Authorization via /api/sql-result-value ServletEPSS 0.2%CVE-2026-63664MEDIUMCloudBeaver: Authorization Bypass (BFLA) - Data Export Restriction BypassEPSS —CVE-2026-55449MEDIUMCloudBeaver: Path Traversal in Resource Manager getProjectPath allows directory enumeration outside shared-projects sandboxEPSS —CVE-2026-63663MEDIUMCloudBeaver: Path Traversal in updateResultsDataBatch Allows Unauthorized Server File Stream AccessEPSS —