Read the docs

Datagear

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Datagear records in CISA KEV

No Datagear vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Datagear 9 records HIGH

Records

9 records in Datagear · all components

TI-2023-01483 CVE-2023-1571 · GHSA-63wp-2cpc-rcwf

DataGear pagingQueryData sql injection

Priority MEDIUM 44

A vulnerability, which was classified as critical, was found in DataGear up to 4.5.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00915 Published 2023-03-22 No fix listed CWE-89
TI-2023-01485 CVE-2023-1573 · GHSA-345x-9phv-xfwq

DataGear Graph Dataset cross site scripting

Priority LOW 28

A vulnerability was found in DataGear up to 1.11.1 and classified as problematic.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0063 Published 2023-03-22 No fix listed CWE-79
TI-2023-01919 CVE-2023-2042 · GHSA-94rv-4qh8-r994

DataGear JDBC Server deserialization

Priority LOW 26

A vulnerability, which was classified as problematic, has been found in DataGear up to 4.7.0/5.1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.01137 Published 2023-04-14 No fix listed CWE-502
TI-2023-06669 CVE-2023-7299 · GHSA-wh54-vv47-2265

DataGear resolveSql sql injection

Priority LOW 25

A vulnerability was found in DataGear up to 4.60.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0064 Published 2024-11-23 No fix listed CWE-74
TI-2023-01484 CVE-2023-1572 · GHSA-f792-rc34-g659

DataGear Plugin cross site scripting

Priority LOW 25

A vulnerability has been found in DataGear up to 1.11.1 and classified as problematic.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00542 Published 2023-03-22 No fix listed CWE-79
TI-2023-01665 CVE-2023-1772 · GHSA-pp3c-rj85-cc8g

DataGear Diagram Type cross site scripting

Priority LOW 23

A vulnerability was found in DataGear up to 4.5.1.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00599 Published 2023-03-31 No fix listed CWE-79
Open these records in search →