Progress Datadirect Hybrid Data Pipeline On Premises Connector vulnerabilities

2 CVEs affecting Progress Datadirect Hybrid Data Pipeline On Premises Connector, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-10703, published 2025-11-19.

More from Progress.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-10703, published 2025-11-19. High severity, CVSS 8.6. EPSS: 0.3% chance of exploitation in the next 30 days. Improper Control of Generation of Code ('Code Injection') vulnerability in Progress DataDirect Connect for JDBC drivers, Progress DataDirect Open Access JDBC driver and Hybrid Data Pipeline allows…
• CVE-2025-10702, published 2025-11-19. High severity, CVSS 8.6. EPSS: 0.3% chance of exploitation in the next 30 days. Improper Control of Generation of Code ('Code Injection') vulnerability in Progress DataDirect Connect for JDBC drivers, Progress DataDirect Open Access JDBC driver and Hybrid Data Pipeline allows…