Metabase
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 30 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 15, 2018 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Metabase SQL Injection Vulnerability
Metabase SQLi zero-day exploited in customer data-theft attacks
Metabase: Arbitrary File Read via MySQL Connection Property Injection
Metabase: Remote Code Execution via Snowflake JDBC Driver Arbitrary File Write
Metabase: Arbitrary Code Execution via Database Connection Detail Bypass
Metabase: Unsafe Deserialization of H2 Query Results
Metabase vulnerable to RCE and Arbitrary File Read via H2 JDBC INIT Injection in EE Serialization Import
Metabase: Server-Side Template Injection via Notifications Endpoint Leads to RCE
Metabase channel test endpoint can reach internal local addresses
Metabase dom.js parseDataUri redos
Monitor Metabase in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.