dataease

Records117All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical18CVSS 9.0–10.0

CVSS high74CVSS 7.0–8.9

Exploited now

dataease records in CISA KEV

No dataease vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Dataease 72 records HIGH

Records

117 records

TI-2024-38037 CVE-2024-57707 · GHSA-7rrf-56g2-vq8r

An issue in DataEase v1 allows an attacker to execute arbitrary code via the user account and password components.

HIGH 82

An issue in DataEase v1 allows an attacker to execute arbitrary code via the user account and password components.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00767 Published 2025-02-07 No fix listed CWE-94

TI-2023-12981 CVE-2023-28437

SQL injection vulnerability due to the keyword blacklist for defending against SQL injection will be bypassed

HIGH 82

Dataease is an open source data visualization and analysis tool.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00882 Published 2023-03-24 Fixed in 1.18.5 CWE-89

TI-2022-18688 CVE-2022-39312 · GHSA-q4qq-jhjv-7rh2

Dataease Mysql Data Source JDBC Connection Parameters Not Verified Leads to Deserialization Vulnerability

HIGH 82

Dataease is an open source data visualization analysis tool.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01926 Published 2022-10-25 Fixed in 1.15.2 CWE-20

TI-2026-24677 CVE-2026-32140

Dataease: Redshift JDBC RCE Bypass

HIGH 81

Dataease is an open source data visualization analysis tool.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00786 Published 2026-03-12 Fixed in 2.10.20 CWE-22

TI-2026-24674 CVE-2026-32137

DataEase SQL Injection Vulnerability

HIGH 81

Dataease is an open source data visualization analysis tool.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00475 Published 2026-03-12 Fixed in 2.10.20 CWE-89

TI-2024-37398 CVE-2024-56511

DataEase has an unauthorized vulnerability

HIGH 81

DataEase is an open source data visualization analysis tool.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.50296 Published 2025-01-10 Fixed in 2.10.4 CWE-289

TI-2025-39841 CVE-2025-64428

DataEase DB2 JNDI Vulnerability

HIGH 80

Dataease is an open source data visualization analysis tool.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.0062 Published 2025-11-20 Fixed in 2.10.17 CWE-74

TI-2025-33010 CVE-2025-53006

Dataease PostgreSQL & Redshift Data Source JDBC Connection Parameters Bypass Vulnerability

HIGH 80

DataEase is an open source business intelligence and data visualization tool.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00616 Published 2025-07-02 Fixed in 2.10.11 CWE-153

TI-2025-33009 CVE-2025-53005

Dataease PostgreSQL Data Source JDBC Connection Parameters Bypass Vulnerability

HIGH 80

DataEase is an open source business intelligence and data visualization tool.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00604 Published 2025-07-01 Fixed in 2.10.11 CWE-153

TI-2025-31131 CVE-2025-49003

Dataease H2 JDBC Connection Remote Code Execution

HIGH 80

DataEase is an open source business intelligence and data visualization tool.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00932 Published 2025-06-26 Fixed in 2.10.11 CWE-153

TI-2024-15430 CVE-2024-23328

The Dataease datasource exists deserialization and arbitrary file read vulnerability

HIGH 80

Dataease is an open source data visualization analysis tool.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01211 Published 2024-02-01 Fixed in 1.18.15, 2.3.0 CWE-502

TI-2026-38758 CVE-2026-53751

DataEase: H2 JDBC URL Filter Bypass Leads to Remote Code Execution (RCE)

HIGH 79

DataEase is an open source data visualization and analysis tool.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00597 Published 2026-07-07 Fixed in 2.10.24 CWE-94

TI-2026-29556 CVE-2026-40900

DataEase has SQL Injection via Stacked Queries

HIGH 79

DataEase is an open-source data visualization and analytics platform.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00342 Published 2026-04-16 Fixed in 2.10.21 CWE-89

TI-2026-25553 CVE-2026-33121

DataEase has SQL Injection via Datasource Save Flow

HIGH 79

DataEase is an open-source data visualization and analytics platform.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00328 Published 2026-04-16 Fixed in 2.10.21 CWE-89

TI-2025-35889 CVE-2025-58046

Dataease has a JDBC attack vulnerability in the Impala datasource

HIGH 79

Dataease is an open-source data visualization and analysis platform.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01429 Published 2025-09-15 Fixed in 2.10.13 CWE-502

TI-2024-34970 CVE-2024-52295

DataEase has a forged JWT token vulnerability

HIGH 79

DataEase is an open source data visualization analysis tool.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00857 Published 2024-11-13 Fixed in 2.10.2 CWE-798

TI-2025-33008 CVE-2025-53004

Dataease Redshift Data Source JDBC Connection Parameters Bypass Vulnerability

HIGH 78

DataEase is an open source business intelligence and data visualization tool.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00604 Published 2025-06-30 Fixed in 2.10.11 CWE-153

TI-2026-37263 CVE-2026-50529

DataEase: Link Token Leakage Prior to Share Password/Ticket Validation

HIGH 77

DataEase is an open source data visualization and analysis tool.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00496 Published 2026-07-07 Fixed in 2.10.24 CWE-863

TI-2026-33284 CVE-2026-45532

DataEase has a Path Traversal Vulnerability

HIGH 77

DataEase is an open source data visualization and analysis tool.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00515 Published 2026-08-18 Fixed in 2.10.23 CWE-22

TI-2026-25397 CVE-2026-32949

SQLBot: SSRF to Arbitrary File Read (AFR) via Rogue MySQL

HIGH 77

SQLBot is an intelligent data query system based on a large language model and RAG.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00454 Published 2026-03-20 Fixed in 1.7.0 CWE-73

TI-2025-35658 CVE-2025-57773

Dataease DB2 Aspectweaver Deserialization Arbitrary File Write Vulnerability

HIGH 77

DataEase is an open source business intelligence and data visualization tool.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.0969 Published 2025-08-25 Fixed in 2.10.12 CWE-502

TI-2025-35657 CVE-2025-57772

Dataease H2 JDBC RCE Bypass

HIGH 77

DataEase is an open source business intelligence and data visualization tool.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.10888 Published 2025-08-25 Fixed in 2.10.12 CWE-94

TI-2026-25735 CVE-2026-33324

SQLBot prompt injection allows arbitrary SQL execution and remote code execution

HIGH 76

SQLBot is an intelligent Text-to-SQL system based on large language models and RAG.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00603 Published 2026-05-05 Fixed in 1.7.1 CWE-89

TI-2023-18888 CVE-2023-37258

DataEase has a SQL injection vulnerability that can bypass blacklists

HIGH 76

DataEase is an open source data visualization analysis tool.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01073 Published 2023-07-25 Fixed in 1.18.9 CWE-89

TI-2025-38687 CVE-2025-62420

DataEase vulnerable to remote code execution via H2 JDBC driver bypass

HIGH 75

DataEase is a data visualization and analytics platform.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.01027 Published 2025-10-17 Fixed in 2.10.14 CWE-502

Open these records in search →