alldata vulnerabilities

2 known vulnerabilities in alldata from Alldatacenter. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  alldata: Missing Authentication for Critical Functionality

  CVE-2026-111613Oct 16, 2026Alldatacenter

  AllData through 0.7.1 contains an unauthenticated JDBC injection vulnerability that allows remote attackers to open arbitrary database connections by supplying jdbcUrl and jdbcDriverClass values to the data-dts /jobJdbcDatasource/test endpoint. Attackers can s

• 7.3 High severity

  A vulnerability was detected in alldatacenter alldata up to 0.6.8.

  CVE-2026-19826Aug 14, 2026Alldatacenter

  A vulnerability was detected in alldatacenter alldata up to 0.6.8. This affects the function Hessian2Input.readObject of the file /serialize/impl/HessianSerializer.java of the component xxl-rpc Listener. The manipulation results in deserialization. The attack