Progress Hybrid Data Pipeline — known CVE vulnerabilities

Every CVE whose affected-product data names Progress Hybrid Data Pipeline, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2025-6504 — CVSS 8.4 (high): In HDP Server versions below 4.6.2.2978 on Linux, unauthorized access could occur via IP spoofing using the X-Forwarded-For header. Since…
• CVE-2025-6505 — CVSS 8.1 (high): Unauthorized access and impersonation can occur in versions 4.6.2.3226 and below of Progress Software's Hybrid Data Pipeline Server on…