metabase Metabase

Name: metabase Metabase
Brand: metabase

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

3critical6high9medium0low

updated 2026-10-26

vulnerabilities (27)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-72898US	—OT critical	97.4% (100th)	KEV	x.59.21	2026-08-10	19 versions
CVE-2021-41277US	high7.5OT critical	97.2% (100th)	KEV	1.40.5	2021-11-17	2 versions
CVE-2026-59827US	high8.8	3.79% (90th)	Exploit	1.59.12	2026-07-09	4 versions
CVE-2022-24853US	medium5.3	2.52% (85th)	Exploit	1.41.6	2022-04-14	6 versions
CVE-2026-33725US	—	0.87% (58th)	Exploit	1.55.22	2026-03-27	6 versions
CVE-2023-37470US	critical9.8	1.35% (71st)	—	1.45.4.3	2023-08-04	8 versions
CVE-2022-39361US	high8.8	1.25% (69th)	—	1.42.6	2022-10-26	8 versions
CVE-2022-24854US	high8.8	1.05% (64th)	—	1.42.4	2022-04-14	4 versions
CVE-2022-39362US	high8.8	1.02% (63rd)	—	0.44.5	2022-10-26	8 versions
CVE-2026-59826US	—	1.01% (63rd)	—	1.58.15.1	2026-07-09	4 versions
CVE-2026-72899US	—	0.79% (56th)	—	v62.9	2026-08-10	19 versions
CVE-2026-50148US	critical9.1	0.77% (55th)	—	1.58.14	2026-07-15	7 versions
CVE-2022-39359US	medium6.5	0.73% (54th)	—	1.43.7	2022-10-26	8 versions
CVE-2022-24855US	medium5.4	0.71% (53rd)	—	0.40.8	2022-04-14	6 versions
CVE-2022-39360US	medium6.5	0.61% (49th)	—	1.44.5	2022-10-26	8 versions
CVE-2023-32680US	critical9.6OT elevated	0.60% (48th)	—	0.45.4	2023-05-18	6 versions
CVE-2022-39358US	medium6.5	0.54% (45th)	—	1.44.5	2022-10-26	6 versions
CVE-2026-27464US	medium6.5	0.52% (43rd)	—	0.58.7	2026-02-21	2 versions
CVE-2023-23628US	medium4.1	0.44% (37th)	—	1.43.7.1	2023-01-28	6 versions
CVE-2024-55951US	—	0.44% (37th)	—	1.52.2.5	2024-12-16	1.52.0, → 1.52.2.5
CVE-2025-30371US	—	0.43% (36th)	—	no fix	2025-03-28	4 versions
CVE-2026-72900US	—OT elevated	0.40% (33rd)	—	v58.24	2026-08-10	19 versions
CVE-2025-32382US	—	0.38% (31st)	—	1.52.17.1	2025-04-10	6 versions
CVE-2023-23629US	medium6.3	0.38% (31st)	—	1.45.2.1	2023-01-28	6 versions
CVE-2025-27141US	medium6.5	0.36% (29th)	—	1.53.2	2025-02-24	4 versions
CVE-2026-50147US	—	0.34% (26th)	—	1.60.4	2026-07-15	4 versions
CVE-2026-22805US	high8.6	0.24% (14th)	—	56.3	2026-01-12	3 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor7 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')3 CVEs
CWE-502Deserialization of Untrusted Data2 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2 CVEs
CWE-1336Improper Neutralization of Special Elements Used in a Template Engine1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-269Improper Privilege Management1 CVEs

sources (3)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)27 CVEs
DECERT-Bund (BSI CSAF)3 CVEs
USCISA CSAF IT advisories3 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan