dataease

Records117All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical18CVSS 9.0–10.0

CVSS high74CVSS 7.0–8.9

Exploited now

dataease records in CISA KEV

No dataease vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Dataease 72 records HIGH

Records

72 records in Dataease · all components

TI-2024-38037 CVE-2024-57707 · GHSA-7rrf-56g2-vq8r

An issue in DataEase v1 allows an attacker to execute arbitrary code via the user account and password components.

HIGH 82

An issue in DataEase v1 allows an attacker to execute arbitrary code via the user account and password components.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00767 Published 2025-02-07 No fix listed CWE-94

TI-2023-12981 CVE-2023-28437

SQL injection vulnerability due to the keyword blacklist for defending against SQL injection will be bypassed

HIGH 82

Dataease is an open source data visualization and analysis tool.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00882 Published 2023-03-24 Fixed in 1.18.5 CWE-89

TI-2022-18688 CVE-2022-39312 · GHSA-q4qq-jhjv-7rh2

Dataease Mysql Data Source JDBC Connection Parameters Not Verified Leads to Deserialization Vulnerability

HIGH 82

Dataease is an open source data visualization analysis tool.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01926 Published 2022-10-25 Fixed in 1.15.2 CWE-20

TI-2026-24677 CVE-2026-32140

Dataease: Redshift JDBC RCE Bypass

HIGH 81

Dataease is an open source data visualization analysis tool.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00786 Published 2026-03-12 Fixed in 2.10.20 CWE-22

TI-2026-24674 CVE-2026-32137

DataEase SQL Injection Vulnerability

HIGH 81

Dataease is an open source data visualization analysis tool.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00475 Published 2026-03-12 Fixed in 2.10.20 CWE-89

TI-2024-37398 CVE-2024-56511

DataEase has an unauthorized vulnerability

HIGH 81

DataEase is an open source data visualization analysis tool.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.50296 Published 2025-01-10 Fixed in 2.10.4 CWE-289

TI-2025-39841 CVE-2025-64428

DataEase DB2 JNDI Vulnerability

HIGH 80

Dataease is an open source data visualization analysis tool.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.0062 Published 2025-11-20 Fixed in 2.10.17 CWE-74

TI-2025-33010 CVE-2025-53006

Dataease PostgreSQL & Redshift Data Source JDBC Connection Parameters Bypass Vulnerability

HIGH 80

DataEase is an open source business intelligence and data visualization tool.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00616 Published 2025-07-02 Fixed in 2.10.11 CWE-153

TI-2025-33009 CVE-2025-53005

Dataease PostgreSQL Data Source JDBC Connection Parameters Bypass Vulnerability

HIGH 80

DataEase is an open source business intelligence and data visualization tool.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00604 Published 2025-07-01 Fixed in 2.10.11 CWE-153

TI-2025-31131 CVE-2025-49003

Dataease H2 JDBC Connection Remote Code Execution

HIGH 80

DataEase is an open source business intelligence and data visualization tool.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00932 Published 2025-06-26 Fixed in 2.10.11 CWE-153

TI-2024-15430 CVE-2024-23328

The Dataease datasource exists deserialization and arbitrary file read vulnerability

HIGH 80

Dataease is an open source data visualization analysis tool.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01211 Published 2024-02-01 Fixed in 1.18.15, 2.3.0 CWE-502

TI-2026-29556 CVE-2026-40900

DataEase has SQL Injection via Stacked Queries

HIGH 79

DataEase is an open-source data visualization and analytics platform.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00342 Published 2026-04-16 Fixed in 2.10.21 CWE-89

TI-2026-25553 CVE-2026-33121

DataEase has SQL Injection via Datasource Save Flow

HIGH 79

DataEase is an open-source data visualization and analytics platform.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00328 Published 2026-04-16 Fixed in 2.10.21 CWE-89

TI-2025-35889 CVE-2025-58046

Dataease has a JDBC attack vulnerability in the Impala datasource

HIGH 79

Dataease is an open-source data visualization and analysis platform.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01429 Published 2025-09-15 Fixed in 2.10.13 CWE-502

TI-2024-34970 CVE-2024-52295

DataEase has a forged JWT token vulnerability

HIGH 79

DataEase is an open source data visualization analysis tool.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00857 Published 2024-11-13 Fixed in 2.10.2 CWE-798

TI-2025-33008 CVE-2025-53004

Dataease Redshift Data Source JDBC Connection Parameters Bypass Vulnerability

HIGH 78

DataEase is an open source business intelligence and data visualization tool.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00604 Published 2025-06-30 Fixed in 2.10.11 CWE-153

TI-2025-35658 CVE-2025-57773

Dataease DB2 Aspectweaver Deserialization Arbitrary File Write Vulnerability

HIGH 77

DataEase is an open source business intelligence and data visualization tool.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.0969 Published 2025-08-25 Fixed in 2.10.12 CWE-502

TI-2025-35657 CVE-2025-57772

Dataease H2 JDBC RCE Bypass

HIGH 77

DataEase is an open source business intelligence and data visualization tool.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.10888 Published 2025-08-25 Fixed in 2.10.12 CWE-94

TI-2023-18888 CVE-2023-37258

DataEase has a SQL injection vulnerability that can bypass blacklists

HIGH 76

DataEase is an open source data visualization analysis tool.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01073 Published 2023-07-25 Fixed in 1.18.9 CWE-89

TI-2025-38687 CVE-2025-62420

DataEase vulnerable to remote code execution via H2 JDBC driver bypass

HIGH 75

DataEase is a data visualization and analytics platform.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.01027 Published 2025-10-17 Fixed in 2.10.14 CWE-502

TI-2025-39609 CVE-2025-64164

DataEase is vulnerable to Oracle JNDI Injection

HIGH 74

Dataease is an open source data visualization analysis tool.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00625 Published 2025-11-06 Fixed in 2.10.15 CWE-502

TI-2026-25525 CVE-2026-33083

DataEase has SQL Injection in Order By Clause

HIGH 73

DataEase is an open-source data visualization and analytics platform.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00328 Published 2026-04-16 Fixed in 2.10.21 CWE-89

TI-2026-25524 CVE-2026-33082

DataEase: SQL Injection in v2 Dataset Export

HIGH 73

DataEase is an open source data visualization analysis tool.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00325 Published 2026-04-16 Fixed in 2.10.21 CWE-89

TI-2025-38689 CVE-2025-62422

DataEase SQL injection vulnerability

HIGH 73

DataEase is an open source data visualization and analytics platform.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00524 Published 2025-10-17 Fixed in 2.10.14 CWE-89

TI-2025-31129 CVE-2025-49001

Dataease Authentication Bypass Vulnerability

HIGH 73

DataEase is an open source business intelligence and data visualization tool.

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.22 Published 2025-06-03 Fixed in 2.10.10 CWE-287

Open these records in search →