DataEase DataEase

• CVE-2026-102755 Medium 5.1 DataEase Datasource/Dataset Folder Name Stored Cross-Site Scripting 0.4%
• CVE-2026-102756 Medium 5.1 DataEase bar-horizontal Axis Label Tooltip Stored Cross-Site Scripting 0.4%
• CVE-2026-104143 High 8.7 DataEase: Stored SQL Injection via dateFormat field templates 0.3%
• CVE-2026-104142 High 8.7 DataEase: Stored SQL Injection in group-field binning bounds 0.4%
• CVE-2026-104141 High 8.7 DataEase: SQL Injection in datasource metadata identifiers 0.4%
• CVE-2023-40772 Medium 4.3 A directory Traversal vulnerability in DataEase before 1.18.10 allows a remote attacker to obtain sensitive information via a a crafted request to the StaticResourceController.java component. 0.9%
• CVE-2026-82879 Medium 6.3 DataEase before 2.10.26 Access Control Bypass via Share Tickets 0.4%
• CVE-2026-82878 Medium 6.3 DataEase before 2.10.26 Missing Object-Level Authorization on Geographic, Linkage and Chart Endpoints 0.3%
• CVE-2026-45532 High 8.7 DataEase has a Path Traversal Vulnerability 0.5%
• CVE-2026-49867 Medium 6.3 DataEase: Authenticated Stored XSS in DataEase Template Static Resources 0.5%
• CVE-2026-46684 Critical 9.5 DataEase: Unauthorized Command Execution Vulnerability 0.3%
• CVE-2026-45320 High 8.7 DataEase Data Dashboard SqlVariable transFilter Unfiltered SQL Injection 0.5%
• CVE-2026-45535 High 8.7 DataEase: Stored SQL Injection Vulnerability 0.4%
• CVE-2026-45533 High 8.3 DataEase: Path Traversal Vulnerability 0.5%
• CVE-2026-50124 High 7.1 DataEase: Remote Code Execution (RCE) via Zip Protocol & File Dropper 0.6%
• CVE-2026-50030 High 7.1 DataEase: Arbitrary SQL execution in preview path (direct data disclosure) 0.5%
• CVE-2026-45419 High 8.5 DataEase: Arbitrary File Write Vulnerability 0.5%
• CVE-2026-45417 High 8.7 DataEase: SQL injection vulnerability 0.4%
• CVE-2026-45534 Critical 9.0 DataEase: RCE Vulnerability 0.6%
• CVE-2026-50530 High 7.1 DataEase: Token with Overly Broad Privileges in Share Mode: Access to Unshared Datasets 0.4%
• CVE-2026-50529 High 8.7 DataEase: Link Token Leakage Prior to Share Password/Ticket Validation 0.5%
• CVE-2026-55647 Medium 5.1 DataEase: authenticated stored XSS in the dashboard text components 0.5%
• CVE-2026-55635 High 8.7 DataEase: Authenticated SQL Injection in Chart Quota Filters 0.4%
• CVE-2026-57172 High 8.3 DataEase: Hardcoded JWT Signing Secret in ShareLink 0.4%
• CVE-2026-53751 High 8.7 DataEase: H2 JDBC URL Filter Bypass Leads to Remote Code Execution (RCE) 0.6%
• CVE-2026-53730 High 8.7 DataEase: Unauthorized Access to Engine Database via previewSql Endpoint 0.4%
• CVE-2026-55633 High 8.7 DataEase H2 RCE via Zip Protocol & File Dropper Fix bypass 0.8%
• CVE-2026-55631 High 7.2 DataEase: Path Traversal Leading to Arbitrary File Deletion via Font Management 0.5%
• CVE-2026-53729 High 8.7 DataEase ExportCenter IDOR allows cross-user export task access 0.6%
• CVE-2026-40901 High 7.5 DataEase: Quartz Deserialization → Remote Code Execution 0.6%
• CVE-2026-40900 High 8.7 DataEase has SQL Injection via Stacked Queries 0.3%
• CVE-2026-40899 High 8.3 DataEase has an Arbitrary File Read Vulnerability 0.4%
• CVE-2026-33207 High 8.6 DataEase SQL Injection Vulnerability 0.3%
• CVE-2026-33122 High 8.6 DataEase has SQL Injection via Datasource Management 0.4%
• CVE-2026-33121 High 8.7 DataEase has SQL Injection via Datasource Save Flow 0.3%
• CVE-2026-33084 High 8.7 DataEase has SQL Injection through its getFieldEnumObj Endpoint 0.3%
• CVE-2026-33083 High 8.7 DataEase has SQL Injection in Order By Clause 0.3%
• CVE-2026-33082 High 8.7 DataEase: SQL Injection in v2 Dataset Export 0.3%
• CVE-2026-32939 High 7.7 DataEase is Vulnerable to H2 JDBC RCE Bypass 0.5%
• CVE-2026-32140 Critical 9.3 Dataease: Redshift JDBC RCE Bypass 0.7%
• CVE-2026-32139 Medium 5.3 Dataease: Unfiltered active SVG content leads to Stored XSS 0.2%
• CVE-2026-32137 Critical 9.3 DataEase SQL Injection Vulnerability 0.4%
• CVE-2026-23958 High 8.8 DataEase Vulnerable to Brute-Force Attack on Admin JWT Secret Derived from Password that Enables Full Account Takeover 0.5%
• CVE-2025-64428 High 8.9 DataEase DB2 JNDI Vulnerability 0.6%
• CVE-2025-64164 High 8.9 DataEase is vulnerable to Oracle JNDI Injection 0.6%
• CVE-2025-64163 High 8.9 DataEase's DB2 is vulnerable to SSRF 1.2%
• CVE-2025-62419 High 8.2 DataEase vulnerable to JDBC URL injection in DB2 and MongoDB data source configuration 0.4%
• CVE-2025-62420 High 8.2 DataEase vulnerable to remote code execution via H2 JDBC driver bypass 1.0%
• CVE-2025-62421 Medium 5.5 DataEase vulnerable to stored cross-site scripting via file upload bypass 0.3%
• CVE-2025-62422 High 8.7 DataEase SQL injection vulnerability 0.5%