CVE-2025-10702

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2025
Source publication: Nov 19, 2025
Source updated: Feb 26, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Improper Control of Generation of Code ('Code Injection') vulnerability in Progress DataDirect Connect for JDBC drivers, Progress DataDirect Open Access JDBC driver and Hybrid Data Pipeline allows Remote Code Inclusion. The SpyAttribute connection option implemented by the DataDirect Connect for JDBC drivers, DataDirect Hybrid Data Pipeline JDBC driver and the DataDirect OpenAccess JDBC driver supports an undocumented syntax construct for the option value that if discovered can be used by an attacker. If an application allows an end user to specify a value for the SpyAttributes connection option then an attacker can use the undocumented syntax to cause the driver to load an arbitrary class on the class path and execute a constructor on that class. This issue affects: DataDirect Connect for JDBC for Amazon Redshift: through 6.0.0.001392, fixed in 6.0.0.001541 DataDirect Connect for JDBC for Apache Cassandra: through 6.0.0.000805, fixed in 6.0.0.000833 DataDirect Connect for JDBC for Hive: through 6.0.1.001499, fixed in 6.0.1.001628 DataDirect Connect for JDBC for Apache Impala: through 6.0.0.001155, fixed in 6.0.0.001279 DataDirect Connect for JDBC for Apache SparkSQL: through 6.0.1.001222, fixed in 6.0.1.001344 DataDirect Connect for JDBC Autonomous REST Connector: through 6.0.1.006961, fixed in 6.0.1.007063 DataDirect Connect for JDBC for DB2: through 6.0.0.000717, fixed in 6.0.0.000964 DataDirect Connect for JDBC for Google Analytics 4: through 6.0.0.000454, fixed in 6.0.0.000525 DataDirect Connect for JDBC for Google BigQuery: through 6.0.0.002279, fixed in 6.0.0.002410 DataDirect Connect for JDBC for Greenplum: through 6.0.0.001712, fixed in 6.0.0.001727 DataDirect Connect for JDBC for Informix: through 6.0.0.000690, fixed in 6.0.0.0851 DataDirect Connect for JDBC for Microsoft Dynamics 365: through 6.0.0.003161, fixed in 6.0.0.3198 DataDirect Connect for JDBC for Microsoft SQLServer: through 6.0.0.001936, fixed in 6.0.0.001957 DataDirect Connect for JDBC for Microsoft Sharepoint: through 6.0.0.001559, fixed in 6.0.0.001587 DataDirect Connect for JDBC for MongoDB: through 6.1.0.001654, fixed in 6.1.0.001669 DataDirect Connect for JDBC for MySQL: through 5.1.4.000330, fixed in 5.1.4.000364 DataDirect Connect for JDBC for Oracle Database: through 6.0.0.001747, fixed in 6.0.0.001776 DataDirect Connect for JDBC for Oracle Eloqua: through 6.0.0.001438, fixed in 6.0.0.001458 DataDirect Connect for JDBC for Oracle Sales Cloud: through 6.0.0.001225, fixed in 6.0.0.001316 DataDirect Connect for JDBC for Oracle Service Cloud: through 5.1.4.000298, fixed in 5.1.4.000309 DataDirect Connect for JDBC for PostgreSQL: through 6.0.0.001843, fixed in 6.0.0.001856 DataDirect Connect for JDBC for Progress OpenEdge: through 5.1.4.000187, fixed in 5.1.4.000189 DataDirect Connect for JDBC for Salesforce: through 6.0.0.003020, fixed in 6.0.0.003125 DataDirect Connect for JDBC for SAP HANA: through 6.0.0.000879, product retired DataDirect Connect for JDBC for SAP S/4 HANA: through 6.0.1.001818, fixed in 6.0.1.001858 DataDirect Connect for JDBC for Sybase ASE: through 5.1.4.000161, fixed in 5.1.4.000162 DataDirect Connect for JDBC for Snowflake: through 6.0.1.001821, fixed in 6.0.1.001856 DataDirect Hybrid Data Pipeline Server: through 4.6.2.3309, fixed in 4.6.2.3430 DataDirect Hybrid Data Pipeline JDBC Driver: through 4.6.2.0607, fixed in 4.6.2.1023 DataDirect Hybrid Data Pipeline On Premises Connector: through 4.6.2.1223, fixed in 4.6.2.1339 DataDirect Hybrid Data Pipeline Docker: through 4.6.2.3316, fixed in 4.6.2.3430 DataDirect OpenAccess JDBC Driver: through 8.1.0.0177, fixed in 8.1.0.0183 DataDirect OpenAccess JDBC Driver: through 9.0.0.0019, fixed in 9.0.0.0022

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

DataDirect Connect for JDBC for Amazon Redshift

Vendor: Progress
Product: DataDirect Connect for JDBC for Amazon Redshift
Platforms: Unknown
Default status: unaffected

DataDirect Connect for JDBC for Amazon Redshift · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	6.0.0.001392	None listed
6.0.0.001541	`unaffected`	custom	Unavailable	Unavailable	None listed

DataDirect Connect for JDBC for Apache Cassandra

Vendor: Progress
Product: DataDirect Connect for JDBC for Apache Cassandra
Platforms: Unknown
Default status: unaffected

DataDirect Connect for JDBC for Apache Cassandra · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	6.0.0.000805	None listed
6.0.0.000833	`unaffected`	custom	Unavailable	Unavailable	None listed

DataDirect Connect for JDBC for Hive

Vendor: Progress
Product: DataDirect Connect for JDBC for Hive
Platforms: Unknown
Default status: unaffected

DataDirect Connect for JDBC for Hive · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	6.0.1.001499	None listed
6.0.1.001628	`unaffected`	custom	Unavailable	Unavailable	None listed

DataDirect Connect for JDBC for Apache Impala

Vendor: Progress
Product: DataDirect Connect for JDBC for Apache Impala
Platforms: Unknown
Default status: unaffected

DataDirect Connect for JDBC for Apache Impala · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	6.0.0.001155	None listed
6.0.0.1279	`unaffected`	custom	Unavailable	Unavailable	None listed

DataDirect Connect for JDBC for Apache SparkSQL

Vendor: Progress
Product: DataDirect Connect for JDBC for Apache SparkSQL
Platforms: Unknown
Default status: unaffected

DataDirect Connect for JDBC for Apache SparkSQL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	6.0.1.001222	None listed
6.0.1.001344	`unaffected`	custom	Unavailable	Unavailable	None listed

DataDirect Connect for JDBC Autonomous REST Connector

Vendor: Progress
Product: DataDirect Connect for JDBC Autonomous REST Connector
Platforms: Unknown
Default status: unaffected

DataDirect Connect for JDBC Autonomous REST Connector · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	6.0.1.006961	None listed
6.0.1.007063	`unaffected`	custom	Unavailable	Unavailable	None listed

DataDirect Connect for JDBC for DB2

Vendor: Progress
Product: DataDirect Connect for JDBC for DB2
Platforms: Unknown
Default status: unaffected

DataDirect Connect for JDBC for DB2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	6.0.0.000717	None listed
6.0.0.000964	`unaffected`	custom	Unavailable	Unavailable	None listed

DataDirect Connect for JDBC for Google Analytics 4

Vendor: Progress
Product: DataDirect Connect for JDBC for Google Analytics 4
Platforms: Unknown
Default status: unaffected

DataDirect Connect for JDBC for Google Analytics 4 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	6.0.0.000454	None listed
6.0.0.000525	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

DataDirect Connect for JDBC for Google BigQuery

Vendor: Progress
Product: DataDirect Connect for JDBC for Google BigQuery
Platforms: Unknown
Default status: unaffected

DataDirect Connect for JDBC for Google BigQuery · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	6.0.0.002279	None listed
6.0.0.002410	`unaffected`	custom	Unavailable	Unavailable	None listed

DataDirect Connect for JDBC for Greenplum

Vendor: Progress
Product: DataDirect Connect for JDBC for Greenplum
Platforms: Unknown
Default status: unaffected

DataDirect Connect for JDBC for Greenplum · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	6.0.0.001712	None listed
6.0.0.001727	`unaffected`	custom	Unavailable	Unavailable	None listed

DataDirect Connect for JDBC for Informix

Vendor: Progress
Product: DataDirect Connect for JDBC for Informix
Platforms: Unknown
Default status: unaffected

DataDirect Connect for JDBC for Informix · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	6.0.0.000690	None listed
6.0.0.000851	`unaffected`	custom	Unavailable	Unavailable	None listed

DataDirect Connect for JDBC for Microsoft Dynamics 365

Vendor: Progress
Product: DataDirect Connect for JDBC for Microsoft Dynamics 365
Platforms: Unknown
Default status: unaffected

DataDirect Connect for JDBC for Microsoft Dynamics 365 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	6.0.0.003161	None listed
6.0.0.003198	`unaffected`	custom	Unavailable	Unavailable	None listed

DataDirect Connect for JDBC for Microsoft SQLServer

Vendor: Progress
Product: DataDirect Connect for JDBC for Microsoft SQLServer
Platforms: Unknown
Default status: unaffected

DataDirect Connect for JDBC for Microsoft SQLServer · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	6.0.0.001936	None listed
6.0.0.001957	`unaffected`	custom	Unavailable	Unavailable	None listed

DataDirect Connect for JDBC for Microsoft Sharepoint

Vendor: Progress
Product: DataDirect Connect for JDBC for Microsoft Sharepoint
Platforms: Unknown
Default status: unaffected

DataDirect Connect for JDBC for Microsoft Sharepoint · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	6.0.0.001559	None listed
6.0.0.001587	`unaffected`	custom	Unavailable	Unavailable	None listed

DataDirect Connect for JDBC for MongoDB

Vendor: Progress
Product: DataDirect Connect for JDBC for MongoDB
Platforms: Unknown
Default status: unaffected

DataDirect Connect for JDBC for MongoDB · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	6.1.0.001654	None listed
6.1.0.001669	`unaffected`	custom	Unavailable	Unavailable	None listed

DataDirect Connect for JDBC for MySQL

Vendor: Progress
Product: DataDirect Connect for JDBC for MySQL
Platforms: Unknown
Default status: unaffected

DataDirect Connect for JDBC for MySQL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	5.1.4.000330	None listed
5.1.4.000364	`unaffected`	custom	Unavailable	Unavailable	None listed

DataDirect Connect for JDBC for Oracle Database

Vendor: Progress
Product: DataDirect Connect for JDBC for Oracle Database
Platforms: Unknown
Default status: unaffected

DataDirect Connect for JDBC for Oracle Database · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	6.0.0.001747	None listed
6.0.0.001776	`unaffected`	custom	Unavailable	Unavailable	None listed

DataDirect Connect for JDBC for Oracle Eloqua

Vendor: Progress
Product: DataDirect Connect for JDBC for Oracle Eloqua
Platforms: Unknown
Default status: unaffected

DataDirect Connect for JDBC for Oracle Eloqua · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	6.0.0.001438	None listed
6.0.0.001458	`unaffected`	custom	Unavailable	Unavailable	None listed

DataDirect Connect for JDBC for Oracle Sales Cloud

Vendor: Progress
Product: DataDirect Connect for JDBC for Oracle Sales Cloud
Platforms: Unknown
Default status: unaffected

DataDirect Connect for JDBC for Oracle Sales Cloud · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	6.0.0.001225	None listed
6.0.0.001316	`unaffected`	custom	Unavailable	Unavailable	None listed

DataDirect Connect for JDBC for Oracle Service Cloud

Vendor: Progress
Product: DataDirect Connect for JDBC for Oracle Service Cloud
Platforms: Unknown
Default status: unaffected

DataDirect Connect for JDBC for Oracle Service Cloud · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	5.1.4.000298	None listed
5.1.4.000309	`unaffected`	custom	Unavailable	Unavailable	None listed

DataDirect Connect for JDBC for PostgreSQL

Vendor: Progress
Product: DataDirect Connect for JDBC for PostgreSQL
Platforms: Unknown
Default status: unaffected

DataDirect Connect for JDBC for PostgreSQL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	6.0.0.001843	None listed
6.0.0.001856	`unaffected`	custom	Unavailable	Unavailable	None listed

DataDirect Connect for JDBC for Progress OpenEdge

Vendor: Progress
Product: DataDirect Connect for JDBC for Progress OpenEdge
Platforms: Unknown
Default status: unaffected

DataDirect Connect for JDBC for Progress OpenEdge · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	5.1.4.000187	None listed
5.1.4.000189	`unaffected`	custom	Unavailable	Unavailable	None listed

DataDirect Connect for JDBC for Salesforce

Vendor: Progress
Product: DataDirect Connect for JDBC for Salesforce
Platforms: Unknown
Default status: unaffected

DataDirect Connect for JDBC for Salesforce · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	6.0.0.003020	None listed
6.0.0.003125	`unaffected`	custom	Unavailable	Unavailable	None listed

DataDirect Connect for JDBC for SAP HANA

Vendor: Progress
Product: DataDirect Connect for JDBC for SAP HANA
Platforms: Unknown
Default status: unaffected

DataDirect Connect for JDBC for SAP HANA · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	6.0.0.000879	None listed

DataDirect Connect for JDBC for SAP S/4 HANA

Vendor: Progress
Product: DataDirect Connect for JDBC for SAP S/4 HANA
Platforms: Unknown
Default status: unaffected

DataDirect Connect for JDBC for SAP S/4 HANA · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	6.0.1.001818	None listed
6.0.1.001858	`unaffected`	custom	Unavailable	Unavailable	None listed

DataDirect Connect for JDBC for Sybase ASE

Vendor: Progress
Product: DataDirect Connect for JDBC for Sybase ASE
Platforms: Unknown
Default status: unaffected

DataDirect Connect for JDBC for Sybase ASE · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	5.1.4.000161	None listed
5.1.4.000162	`unaffected`	custom	Unavailable	Unavailable	None listed

DataDirect Connect for JDBC for Snowflake

Vendor: Progress
Product: DataDirect Connect for JDBC for Snowflake
Platforms: Unknown
Default status: unaffected

DataDirect Connect for JDBC for Snowflake · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	6.0.1.001821	None listed
6.0.1.001856	`unaffected`	custom	Unavailable	Unavailable	None listed

DataDirect Hybrid Data Pipeline Server

Vendor: Progress
Product: DataDirect Hybrid Data Pipeline Server
Platforms: Unknown
Default status: unaffected

DataDirect Hybrid Data Pipeline Server · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	4.6.2.3309	None listed
4.6.2.3430	`unaffected`	custom	Unavailable	Unavailable	None listed

DataDirect Hybrid Data Pipeline JDBC Driver

Vendor: Progress
Product: DataDirect Hybrid Data Pipeline JDBC Driver
Platforms: Unknown
Default status: unaffected

DataDirect Hybrid Data Pipeline JDBC Driver · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	4.6.2.0607	None listed
4.6.2.1023	`unaffected`	custom	Unavailable	Unavailable	None listed

DataDirect Hybrid Data Pipeline On Premises Connector

Vendor: Progress
Product: DataDirect Hybrid Data Pipeline On Premises Connector
Platforms: Unknown
Default status: unaffected

DataDirect Hybrid Data Pipeline On Premises Connector · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	4.6.2.1223	None listed
4.6.2.1339	`unaffected`	custom	Unavailable	Unavailable	None listed

DataDirect Hybrid Data Pipeline Docker

Vendor: Progress
Product: DataDirect Hybrid Data Pipeline Docker
Platforms: Unknown
Default status: unaffected

DataDirect Hybrid Data Pipeline Docker · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	4.6.2.3316	None listed
4.6.2.3430	`unaffected`	custom	Unavailable	Unavailable	None listed

DataDirect OpenAccess JDBC Driver

Vendor: Progress
Product: DataDirect OpenAccess JDBC Driver
Platforms: Unknown
Default status: unaffected

DataDirect OpenAccess JDBC Driver · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	8.1.0.0177	None listed
8.1.0.0183	`unaffected`	custom	Unavailable	Unavailable	None listed

DataDirect OpenAccess JDBC Driver

Vendor: Progress
Product: DataDirect OpenAccess JDBC Driver
Platforms: Unknown
Default status: unaffected

DataDirect OpenAccess JDBC Driver · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	9.0.0.0019	None listed
9.0.0.0022	`unaffected`	custom	Unavailable	Unavailable	None listed