Exposição de Datadog

Analytics, RUM
63
score de exposição
85.325
sites usam
0
em exploração
1
críticos
Análise Vexday

O histórico de vulnerabilidades do Datadog é relativamente enxuto, com apenas 11 CVEs catalogadas e nenhuma registrada no catálogo de exploração ativa do CISA KEV, situação abaixo da média geral do catálogo. A CVE de maior atenção no momento é CVE-2026-22871, com pontuação EPSS de 0,0095, indicando probabilidade baixa de exploração em curto prazo, embora a presença de uma CVE de severidade crítica no conjunto exija monitoramento contínuo. O tipo de falha mais frequente é CWE-20 (validação inadequada de entrada), o que sugere atenção aos processos de tratamento e sanitização de dados na superfície exposta. Com duas CVEs surgidas nos últimos 90 dias, o ritmo de descoberta recente merece acompanhamento para avaliar se representa uma tendência de crescimento no volume de achados.

CVEs

26 resultados
CVE-2026-22871HIGHGuardDog Path Traversal Vulnerability Leads to Arbitrary File Overwrite and RCEEPSS 1.1%CVE-2023-38704HIGHimport-in-the-middle allows unsanitized user controlled input in module generationEPSS 1.0%CVE-2026-50271HIGHdd-trace-py: Improper parsing of W3C baggage headers may lead to DoSEPSS 0.8%CVE-2026-50274HIGHdd-trace-go: Improper parsing of W3C baggage headers may lead to DoSEPSS 0.8%CVE-2026-50273HIGHDatadog .NET Tracer: Improper parsing of W3C baggage headers may lead to DoSEPSS 0.8%CVE-2026-50272HIGHdd-trace: Improper parsing of W3C baggage headers may lead to DoSEPSS 0.8%CVE-2026-50276HIGHdd-trace-rb: Improper parsing of W3C baggage headers may lead to DoSEPSS 0.8%CVE-2026-33728CRITICALdd-trace-java: Unsafe deserialization in RMI instrumentation may lead to remote code executionEPSS 0.7%CVE-2022-23530MEDIUMGuardDog vulnerable to arbitrary file write when scanning a specially-crafted remote PyPI packageEPSS 0.7%CVE-2022-23531MEDIUMArbitrary file write when scanning a specially-crafted local PyPI packageEPSS 0.7%CVE-2021-21331LOWDataDog API Client contains a Local Information Disclosure VulnerabilityEPSS 0.6%CVE-2026-54788HIGHdd-trace-rs: Unbounded W3C tracestate parsing may lead to DoSEPSS 0.6%CVE-2026-50270HIGHdd-trace-java: Improper parsing of W3C baggage headers may lead to DoSEPSS 0.6%CVE-2026-50277HIGHdd-trace-cpp: Improper parsing of W3C baggage headers may lead to DoSEPSS 0.6%CVE-2026-22870HIGHGuardDog Zip Bomb Vulnerability in safe_extract() Allows DoSEPSS 0.5%CVE-2026-50275HIGHDatadog PHP Tracer: Improper parsing of W3C baggage headers may lead to DoSEPSS 0.5%CVE-2024-38525HIGHdd-trace-cpp malformed unicode header values may cause crashEPSS 0.4%CVE-2026-47364MEDIUMIn versions of the Datadog Android application prior to v545-5.9.2, the app tags Crashlytics data with the user's Datadog UUID, with no userEPSS 0.3%CVE-2026-44971HIGHGuardDog: Blind GitHub URL rewrite in remote project scanning causes SSRF and `GH_TOKEN` exfiltrationEPSS 0.2%CVE-2026-44964MEDIUMIn versions of the Datadog Android application prior to v545-5.9.2, OnCallNotificationActivity is declared exported with no permission guardEPSS 0.2%