Datavane

Products

ProductCVEsExploitedLatest
tis3–Aug 14, 2026
Datavines1–Apr 26, 2026

Exploited and recent CVEs

  • CVE-2026-69101 High 7.7 Datavane TIS v5.0.0 XXE Injection via doEditWorkflow Endpoint 0.4%
  • CVE-2026-7018 Medium 5.6 Datavane Datavines JWT Token TokenManager.java hard-coded key 0.3%
  • CVE-2026-24816 Critical 10.0 Cookie Security Vulnerabilities in datavane/tis 0.3%
  • CVE-2026-24815 Critical 10.0 A XStream Security Vulnerability in XML Deserialization in datavane/tis 0.4%