DataEase DataEase

• CVE-2025-58748 High 8.7 Dataease H2 data source JDBC URL validation bypass leads to remote code execution 0.8%
• CVE-2025-58046 High 8.7 Dataease has a JDBC attack vulnerability in the Impala datasource 1.4%
• CVE-2025-58045 High 7.1 Dataease server-side request forgery via unfiltered DB2 JDBC ldap parameter 0.7%
• CVE-2025-57772 High 8.2 Dataease H2 JDBC RCE Bypass 10.9%
• CVE-2025-57773 High 8.2 Dataease DB2 Aspectweaver Deserialization Arbitrary File Write Vulnerability 9.7%
• CVE-2025-53006 High 8.9 Dataease PostgreSQL & Redshift Data Source JDBC Connection Parameters Bypass Vulnerability 0.6%
• CVE-2025-53005 High 8.9 Dataease PostgreSQL Data Source JDBC Connection Parameters Bypass Vulnerability 0.6%
• CVE-2025-53004 High 8.9 Dataease Redshift Data Source JDBC Connection Parameters Bypass Vulnerability 0.6%
• CVE-2025-49003 High 8.9 Dataease H2 JDBC Connection Remote Code Execution 0.9%
• CVE-2025-49002 High 8.2 Dataease H2 Database Remote Code Execution (RCE) Bypass Vulnerability 50.4%
• CVE-2025-49001 High 7.7 Dataease Authentication Bypass Vulnerability 22.0%
• CVE-2025-48999 Medium 6.8 Dataease Redshift Data Source JDBC Connection Parameters Not Verified Leads to RCE Vulnerability 10.4%
• CVE-2025-48998 High 7.3 Dataease MYSQL JDBC File Reading Vulnerability 0.5%
• CVE-2025-46566 Medium 6.8 Dataease redshift JDBC Connection Remote Code Execution 0.8%
• CVE-2025-32966 High 8.2 Dataease H2 JDBC Connection Remote Code Execution 4.5%
• CVE-2025-27138 High 7.7 DataEase has an improper authentication vulnerability 0.6%
• CVE-2025-27103 High 7.3 Dataease Mysql JDBC Connection Parameters Not Being Verified Leads to Arbitrary File Read Vulnerability​ 0.5%
• CVE-2025-24974 High 7.3 DataEase Mysql JDBC Connection Parameters Not Being Verified Leads to Arbitrary File Read Vulnerability 0.4%
• CVE-2024-56511 Critical 9.3 DataEase has an unauthorized vulnerability 50.3%
• CVE-2024-55952 High 8.6 Dataease Redshift Data Source JDBC Connection Parameters Not Verified Leads to RCE Vulnerability 0.9%
• CVE-2024-55953 High 8.6 Dataease Mysql JDBC Connection Parameters Not Verified Leads to Deserialization and Arbitrary File Read Vulnerability 1.0%
• CVE-2024-52295 Critical 9.3 DataEase has a forged JWT token vulnerability 0.9%
• CVE-2024-47073 Critical 9.3 Dataease arbitrary interface access vulnerability 1.2%
• CVE-2024-47074 Critical 9.3 Dataease PostgreSQL Data Source JDBC Connection Parameters Not Verified Leads to Deserialization Vulnerability 0.6%
• CVE-2024-46997 Critical 9.8 DataEase's H2 datasource has a remote command execution risk 1.4%
• CVE-2024-46985 High 7.5 DataEase has an XXE vulnerability 0.7%
• CVE-2024-31441 High 7.5 Arbitrary File Reading in DataEase 0.6%
• CVE-2024-30269 Medium 5.3 DataEase has database configuration information exposure vulnerability 15.9%
• CVE-2024-23328 Critical 9.1 The Dataease datasource exists deserialization and arbitrary file read vulnerability 1.2%
• CVE-2023-40183 High 7.5 DataEase has a vulnerability to obtain user cookies 0.8%
• CVE-2023-37258 High 8.8 DataEase has a SQL injection vulnerability that can bypass blacklists 1.1%
• CVE-2023-37257 Medium 5.4 The DataEase panel and dataset have a stored XSS vulnerability 0.4%
• CVE-2023-35164 Medium 6.3 Unauthorized users can manipulate a dashboard created by an administrator in DataEase 0.4%
• CVE-2023-34463 High 8.1 Unauthorized users can delete applications in DataEase 0.7%
• CVE-2023-35168 Medium 6.5 DataEase has a privilege bypass vulnerability 0.7%
• CVE-2023-33963 Critical 9.8 DataEase data source has deserialization vulnerability 1.3%
• CVE-2023-32310 High 8.1 DataEase API interface has IDOR vulnerability 1.0%
• CVE-2023-28637 High 8.0 DataEase AWS redshift data source exists for remote code execution vulnerability 1.3%
• CVE-2023-28437 Critical 9.8 SQL injection vulnerability due to the keyword blacklist for defending against SQL injection will be bypassed 0.9%
• CVE-2023-28435 Medium 6.5 Dataease file upload interface does not verify permission or file type 0.5%
• CVE-2023-25807 High 7.2 DataEase dashboard has a stored XSS vulnerability 0.5%
• CVE-2022-39312 Critical 9.8 Dataease Mysql Data Source JDBC Connection Parameters Not Verified Leads to Deserialization Vulnerability 1.9%