Hybrid Data Pipeline vulnerabilities

2 known vulnerabilities in Hybrid Data Pipeline from Progress Software. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Hybrid Data Pipeline: Improper Authentication

  CVE-2025-6505Jul 29, 2025Progress Software

  Unauthorized access and impersonation can occur in versions 4.6.2.3226 and below of Progress Software's Hybrid Data Pipeline Server on Linux. This vulnerability allows attackers to combine credentials from different sources, potentially leading to client imper

• 8.4 High severity

  Hybrid Data Pipeline: Insufficient Verification of Data Authenticity

  CVE-2025-6504Jul 29, 2025Progress Software

  In HDP Server versions below 4.6.2.2978 on Linux, unauthorized access could occur via IP spoofing using the X-Forwarded-For header. Since XFF is a client-controlled header, it could be spoofed, allowing unauthorized access if the spoofed IP matched a whitelist