https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-36301.htmlhttps://patchthecve.com/cve/CVE-2023-36301.htmlWed, 17 Jun 2026 06:06:00 +0000HIGH 7.5: Talend Data Catalog before 8.0-20230221 contain a directory traversal vulnerability in HeaderImageServlet.https://patchthecve.com/cve/CVE-2023-33247.htmlhttps://patchthecve.com/cve/CVE-2023-33247.htmlWed, 17 Jun 2026 06:01:24 +0000HIGH 7.5: Talend Data Catalog remote harvesting server before 8.0-20230413 contains a /upgrade endpoint that allows an unauthenticated WAR file to be deployed on the server. (A mitigation is that the remote harvesting server should be behind a firewall that only allows access to the Talend Data Catalog serverhttps://patchthecve.com/cve/CVE-2023-26264.htmlhttps://patchthecve.com/cve/CVE-2023-26264.htmlWed, 17 Jun 2026 05:42:56 +0000MEDIUM 5.5: All versions of Talend Data Catalog before 8.0-20220907 are potentially vulnerable to XML External Entity (XXE) attacks in the license parsing code.https://patchthecve.com/cve/CVE-2023-26263.htmlhttps://patchthecve.com/cve/CVE-2023-26263.htmlWed, 17 Jun 2026 05:42:55 +0000MEDIUM 5.5: All versions of Talend Data Catalog before 8.0-20230110 are potentially vulnerable to XML External Entity (XXE) attacks in the /MIMBWebServices/license endpoint of the remote harvesting server.