Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    4 vulnerabilities by Collibra

    CVE-2026-10622 (GCVE-0-2026-10622)

    Vulnerability from nvd – Published: 2026-06-02 14:01 – Updated: 2026-06-02 18:48
    VLAI
    Title
    CVE-2026-10622
    Summary
    Improper Authentication in REST API in Collibra Agent, allows a remote unauthenticated attacker to access privileged functionality via exposed '/rest/* endpoints.
    Severity
    8.2 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    Assigner
    References
    Impacted products
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 8.2,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-10622",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-02T18:47:28.416220Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-02T18:48:35.402Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Collibra Platform (on-prem)",
          "vendor": "Collibra",
          "versions": [
            {
              "lessThan": "2026.03.356",
              "status": "affected",
              "version": "2026.03",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Collibra Platform (on-prem)",
          "vendor": "Collibra",
          "versions": [
            {
              "lessThan": "2025.10.399",
              "status": "affected",
              "version": "2025.10",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Collibra Platform (SaaS)",
          "vendor": "Collibra",
          "versions": [
            {
              "lessThan": "2026.04.5",
              "status": "affected",
              "version": "2026.04",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Collibra Platform (SaaS)",
          "vendor": "Collibra",
          "versions": [
            {
              "lessThan": "2026.03.4",
              "status": "affected",
              "version": "2026.03",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Collibra Platform (SaaS)",
          "vendor": "Collibra",
          "versions": [
            {
              "lessThan": "2026.02.6",
              "status": "affected",
              "version": "2026.02",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Collibra Platform (SaaS)",
          "vendor": "Collibra",
          "versions": [
            {
              "lessThan": "2025.11.7",
              "status": "affected",
              "version": "2025.11",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Collibra Platform (SaaS)",
          "vendor": "Collibra",
          "versions": [
            {
              "lessThan": "2025.10.9",
              "status": "affected",
              "version": "2025.10",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Improper Authentication in REST API in Collibra Agent, allows a remote unauthenticated attacker to access privileged functionality via exposed \u0027/rest/* endpoints."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-306 Missing Authentication for Critical Function",
              "lang": "en"
            }
          ]
        },
        {
          "descriptions": [
            {
              "description": "CWE-287 Improper Authentication",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-02T14:01:06.148Z",
        "orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
        "shortName": "certcc"
      },
      "references": [
        {
          "url": "https://www.collibra.com/"
        },
        {
          "url": "https://kb.cert.org/vuls/id/873170"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "CVE-2026-10622",
      "x_generator": {
        "engine": "VINCE 3.0.42",
        "env": "prod",
        "origin": "https://cveawg.mitre.org/api/cve/CVE-2026-10622"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
    "assignerShortName": "certcc",
    "cveId": "CVE-2026-10622",
    "datePublished": "2026-06-02T14:01:06.148Z",
    "dateReserved": "2026-06-02T13:59:47.508Z",
    "dateUpdated": "2026-06-02T18:48:35.402Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-10621 (GCVE-0-2026-10621)

    Vulnerability from nvd – Published: 2026-06-02 14:03 – Updated: 2026-06-02 19:27
    VLAI
    Title
    CVE-2026-10621
    Summary
    Path traversal in restore handler in Collibra Agent, allows an attacker to write arbitrary files via a crafted ZIP archive. Collibra Agent fails to properly validate and canonicalize file path during ZIP extraction, this can allow an attacker to write files outside the intended extraction directory.
    Severity
    7.5 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    Assigner
    References
    Impacted products
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-10621",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-02T19:27:35.294894Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-02T19:27:51.526Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Collibra Platform (SaaS)",
          "vendor": "Collibra",
          "versions": [
            {
              "lessThan": "2025.10.9",
              "status": "affected",
              "version": "2025.10",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Collibra Platform (SaaS)",
          "vendor": "Collibra",
          "versions": [
            {
              "lessThan": "2025.11.7",
              "status": "affected",
              "version": "2025.11",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Collibra Platform (SaaS)",
          "vendor": "Collibra",
          "versions": [
            {
              "lessThan": "2026.02.6",
              "status": "affected",
              "version": "2026.02",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Collibra Platform (SaaS)",
          "vendor": "Collibra",
          "versions": [
            {
              "lessThan": "2026.03.4",
              "status": "affected",
              "version": "2026.03",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Collibra Platform (SaaS)",
          "vendor": "Collibra",
          "versions": [
            {
              "lessThan": "2024.04.5",
              "status": "affected",
              "version": "2026.04",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Collibra Platform (on-prem)",
          "vendor": "Collibra",
          "versions": [
            {
              "lessThan": "2026.03.356",
              "status": "affected",
              "version": "2026.03",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Collibra Platform (on-prem)",
          "vendor": "Collibra",
          "versions": [
            {
              "lessThan": "2025.10.399",
              "status": "affected",
              "version": "2025.10",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Path traversal in restore handler in Collibra Agent, allows an attacker to write arbitrary files via a crafted ZIP archive. Collibra Agent fails to properly validate and canonicalize file path during ZIP extraction, this can allow an attacker to write files outside the intended extraction directory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en"
            }
          ]
        },
        {
          "descriptions": [
            {
              "description": "CWE-73 External Control of File Name or Path",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-02T14:03:35.360Z",
        "orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
        "shortName": "certcc"
      },
      "references": [
        {
          "url": "https://www.collibra.com/"
        },
        {
          "url": "https://kb.cert.org/vuls/id/873170"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "CVE-2026-10621",
      "x_generator": {
        "engine": "VINCE 3.0.42",
        "env": "prod",
        "origin": "https://cveawg.mitre.org/api/cve/CVE-2026-10621"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
    "assignerShortName": "certcc",
    "cveId": "CVE-2026-10621",
    "datePublished": "2026-06-02T14:03:35.360Z",
    "dateReserved": "2026-06-02T13:58:49.342Z",
    "dateUpdated": "2026-06-02T19:27:51.526Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-10621 (GCVE-0-2026-10621)

    Vulnerability from cvelistv5 – Published: 2026-06-02 14:03 – Updated: 2026-06-02 19:27
    VLAI
    Title
    CVE-2026-10621
    Summary
    Path traversal in restore handler in Collibra Agent, allows an attacker to write arbitrary files via a crafted ZIP archive. Collibra Agent fails to properly validate and canonicalize file path during ZIP extraction, this can allow an attacker to write files outside the intended extraction directory.
    Severity
    7.5 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    Assigner
    References
    Impacted products
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-10621",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-02T19:27:35.294894Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-02T19:27:51.526Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Collibra Platform (SaaS)",
          "vendor": "Collibra",
          "versions": [
            {
              "lessThan": "2025.10.9",
              "status": "affected",
              "version": "2025.10",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Collibra Platform (SaaS)",
          "vendor": "Collibra",
          "versions": [
            {
              "lessThan": "2025.11.7",
              "status": "affected",
              "version": "2025.11",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Collibra Platform (SaaS)",
          "vendor": "Collibra",
          "versions": [
            {
              "lessThan": "2026.02.6",
              "status": "affected",
              "version": "2026.02",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Collibra Platform (SaaS)",
          "vendor": "Collibra",
          "versions": [
            {
              "lessThan": "2026.03.4",
              "status": "affected",
              "version": "2026.03",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Collibra Platform (SaaS)",
          "vendor": "Collibra",
          "versions": [
            {
              "lessThan": "2024.04.5",
              "status": "affected",
              "version": "2026.04",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Collibra Platform (on-prem)",
          "vendor": "Collibra",
          "versions": [
            {
              "lessThan": "2026.03.356",
              "status": "affected",
              "version": "2026.03",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Collibra Platform (on-prem)",
          "vendor": "Collibra",
          "versions": [
            {
              "lessThan": "2025.10.399",
              "status": "affected",
              "version": "2025.10",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Path traversal in restore handler in Collibra Agent, allows an attacker to write arbitrary files via a crafted ZIP archive. Collibra Agent fails to properly validate and canonicalize file path during ZIP extraction, this can allow an attacker to write files outside the intended extraction directory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en"
            }
          ]
        },
        {
          "descriptions": [
            {
              "description": "CWE-73 External Control of File Name or Path",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-02T14:03:35.360Z",
        "orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
        "shortName": "certcc"
      },
      "references": [
        {
          "url": "https://www.collibra.com/"
        },
        {
          "url": "https://kb.cert.org/vuls/id/873170"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "CVE-2026-10621",
      "x_generator": {
        "engine": "VINCE 3.0.42",
        "env": "prod",
        "origin": "https://cveawg.mitre.org/api/cve/CVE-2026-10621"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
    "assignerShortName": "certcc",
    "cveId": "CVE-2026-10621",
    "datePublished": "2026-06-02T14:03:35.360Z",
    "dateReserved": "2026-06-02T13:58:49.342Z",
    "dateUpdated": "2026-06-02T19:27:51.526Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-10622 (GCVE-0-2026-10622)

    Vulnerability from cvelistv5 – Published: 2026-06-02 14:01 – Updated: 2026-06-02 18:48
    VLAI
    Title
    CVE-2026-10622
    Summary
    Improper Authentication in REST API in Collibra Agent, allows a remote unauthenticated attacker to access privileged functionality via exposed '/rest/* endpoints.
    Severity
    8.2 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    Assigner
    References
    Impacted products
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 8.2,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-10622",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-02T18:47:28.416220Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-02T18:48:35.402Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Collibra Platform (on-prem)",
          "vendor": "Collibra",
          "versions": [
            {
              "lessThan": "2026.03.356",
              "status": "affected",
              "version": "2026.03",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Collibra Platform (on-prem)",
          "vendor": "Collibra",
          "versions": [
            {
              "lessThan": "2025.10.399",
              "status": "affected",
              "version": "2025.10",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Collibra Platform (SaaS)",
          "vendor": "Collibra",
          "versions": [
            {
              "lessThan": "2026.04.5",
              "status": "affected",
              "version": "2026.04",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Collibra Platform (SaaS)",
          "vendor": "Collibra",
          "versions": [
            {
              "lessThan": "2026.03.4",
              "status": "affected",
              "version": "2026.03",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Collibra Platform (SaaS)",
          "vendor": "Collibra",
          "versions": [
            {
              "lessThan": "2026.02.6",
              "status": "affected",
              "version": "2026.02",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Collibra Platform (SaaS)",
          "vendor": "Collibra",
          "versions": [
            {
              "lessThan": "2025.11.7",
              "status": "affected",
              "version": "2025.11",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Collibra Platform (SaaS)",
          "vendor": "Collibra",
          "versions": [
            {
              "lessThan": "2025.10.9",
              "status": "affected",
              "version": "2025.10",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Improper Authentication in REST API in Collibra Agent, allows a remote unauthenticated attacker to access privileged functionality via exposed \u0027/rest/* endpoints."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-306 Missing Authentication for Critical Function",
              "lang": "en"
            }
          ]
        },
        {
          "descriptions": [
            {
              "description": "CWE-287 Improper Authentication",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-02T14:01:06.148Z",
        "orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
        "shortName": "certcc"
      },
      "references": [
        {
          "url": "https://www.collibra.com/"
        },
        {
          "url": "https://kb.cert.org/vuls/id/873170"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "CVE-2026-10622",
      "x_generator": {
        "engine": "VINCE 3.0.42",
        "env": "prod",
        "origin": "https://cveawg.mitre.org/api/cve/CVE-2026-10622"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
    "assignerShortName": "certcc",
    "cveId": "CVE-2026-10622",
    "datePublished": "2026-06-02T14:01:06.148Z",
    "dateReserved": "2026-06-02T13:59:47.508Z",
    "dateUpdated": "2026-06-02T18:48:35.402Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}