Vendors / Datagear Records 9 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 0
Exploited now Datagear records in CISA KEV No Datagear vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
DataGear v5.0.0 and earlier was discovered to contain a SpEL (Spring Expression Language) expression injection vulnerability via the Data Viewing interface.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0282 · Published 2024-06-24 · No fix listed CWE-74
Priority HIGH 78
DataGear v5.5.0 is vulnerable to Arbitrary File Deletion.
CVSS 3.1 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00507 · Published 2025-12-10 · No fix listed CWE-22
Priority MEDIUM 59
A vulnerability was found in DataGear up to 5.0.0.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0059 · Published 2024-08-06 · No fix listed CWE-917
Priority MEDIUM 44
A vulnerability, which was classified as critical, was found in DataGear up to 4.5.0.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00915 · Published 2023-03-22 · No fix listed CWE-89
Priority LOW 28
A vulnerability was found in DataGear up to 1.11.1 and classified as problematic.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0063 · Published 2023-03-22 · No fix listed CWE-79
Priority LOW 26
A vulnerability, which was classified as problematic, has been found in DataGear up to 4.7.0/5.1.0.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.01137 · Published 2023-04-14 · No fix listed CWE-502
Priority LOW 25
A vulnerability was found in DataGear up to 4.60.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0064 · Published 2024-11-23 · No fix listed CWE-74
Priority LOW 25
A vulnerability has been found in DataGear up to 1.11.1 and classified as problematic.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00542 · Published 2023-03-22 · No fix listed CWE-79
Priority LOW 23
A vulnerability was found in DataGear up to 4.5.1.
CVSS 3.1 MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00599 · Published 2023-03-31 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
3 0 6 0 0
THREATIST.IORead the docs