Log in Start free

DataEase

Products

ProductCVEsExploitedLatest
DataEase92–Oct 14, 2026
SQLBot16–Nov 3, 2026

Exploited and recent CVEs

  • CVE-2026-121453 Low 2.7 SQLBot through 1.10.3 Path Traversal via datasource importToDb Endpoint 0.4%
  • CVE-2026-102755 Medium 5.1 DataEase Datasource/Dataset Folder Name Stored Cross-Site Scripting 0.4%
  • CVE-2026-102756 Medium 5.1 DataEase bar-horizontal Axis Label Tooltip Stored Cross-Site Scripting 0.4%
  • CVE-2026-104143 High 8.7 DataEase: Stored SQL Injection via dateFormat field templates 0.3%
  • CVE-2026-104142 High 8.7 DataEase: Stored SQL Injection in group-field binning bounds 0.4%
  • CVE-2026-104141 High 8.7 DataEase: SQL Injection in datasource metadata identifiers 0.4%
  • CVE-2026-93660 Medium 6.5 SQLBot through 1.10.1 Improper Access Control via Dashboard Update 0.4%
  • CVE-2026-53557 High 7.7 SQLBot: Second-Order SQL Injection via Excel Datasource Leading to Remote Command Execution 0.3%
  • CVE-2026-53555 Medium 5.1 Stored XSS via SVG Upload 0.5%
  • CVE-2026-53556 Medium 6.0 SQLBot: Authenticated SQL Injection in previewData Resulting in Arbitrary File Read 0.5%
  • CVE-2026-53554 High 7.3 SQLBot: Arbitrary File Write via parseExcel Leading to Code Execution Through Alembic Import Processing 0.4%
  • CVE-2023-40772 Medium 4.3 A directory Traversal vulnerability in DataEase before 1.18.10 allows a remote attacker to obtain sensitive information via a a crafted request to the StaticResourceController.java component. 0.9%
  • CVE-2026-82879 Medium 6.3 DataEase before 2.10.26 Access Control Bypass via Share Tickets 0.4%
  • CVE-2026-82878 Medium 6.3 DataEase before 2.10.26 Missing Object-Level Authorization on Geographic, Linkage and Chart Endpoints 0.3%
  • CVE-2026-45532 High 8.7 DataEase has a Path Traversal Vulnerability 0.5%
  • CVE-2026-72743 Medium 5.4 SQLBot 1.10.0 SQText Dashboard Component Stored XSS via v-html 0.3%
  • CVE-2026-49867 Medium 6.3 DataEase: Authenticated Stored XSS in DataEase Template Static Resources 0.5%
  • CVE-2026-46684 Critical 9.5 DataEase: Unauthorized Command Execution Vulnerability 0.3%
  • CVE-2026-45320 High 8.7 DataEase Data Dashboard SqlVariable transFilter Unfiltered SQL Injection 0.5%
  • CVE-2026-45535 High 8.7 DataEase: Stored SQL Injection Vulnerability 0.4%
  • CVE-2026-45533 High 8.3 DataEase: Path Traversal Vulnerability 0.5%
  • CVE-2026-50124 High 7.1 DataEase: Remote Code Execution (RCE) via Zip Protocol & File Dropper 0.6%
  • CVE-2026-50030 High 7.1 DataEase: Arbitrary SQL execution in preview path (direct data disclosure) 0.5%
  • CVE-2026-45419 High 8.5 DataEase: Arbitrary File Write Vulnerability 0.5%
  • CVE-2026-45417 High 8.7 DataEase: SQL injection vulnerability 0.4%
  • CVE-2026-45534 Critical 9.0 DataEase: RCE Vulnerability 0.6%
  • CVE-2026-50530 High 7.1 DataEase: Token with Overly Broad Privileges in Share Mode: Access to Unshared Datasets 0.4%
  • CVE-2026-50529 High 8.7 DataEase: Link Token Leakage Prior to Share Password/Ticket Validation 0.5%
  • CVE-2026-55647 Medium 5.1 DataEase: authenticated stored XSS in the dashboard text components 0.5%
  • CVE-2026-55635 High 8.7 DataEase: Authenticated SQL Injection in Chart Quota Filters 0.4%