Vendors / running-elephant Records 7 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 3
Exploited now running-elephant records in CISA KEV No running-elephant vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 73
An issue in Datart v1.0.0-rc.3 allows attackers to execute arbitrary code via the url parameter in the JDBC configuration
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00544 · Published 2026-02-17 · No fix listed CWE-78
Priority HIGH 73
Datart 1.0.0-rc.3 is vulnerable to Directory Traversal.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.01351 · Published 2025-09-24 · No fix listed CWE-22
Priority MEDIUM 64
Datart 1.0.0-rc.3 is vulnerable to Directory Traversal in the POST /viz/image interface, since the server directly uses MultipartFile.transferTo() to save the uploaded file to a path controllable by the user, and lacks s…
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00624 · Published 2025-09-24 · No fix listed CWE-22
Priority MEDIUM 59
An information exposure vulnerability in Datart v1.0.0-rc.3 allows authenticated attackers to access sensitive data via a custom H2 JDBC connection string.
CVSS 3.1 MEDIUM 5.7· Adjacent network · Low privileges · No interaction · EPSS 0.00475 · Published 2026-02-17 · No fix listed CWE-200
Priority MEDIUM 55
An issue in Datart v.1.0.0-rc.3 allows a remote attacker to execute arbitrary code via the INIT connection parameter.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03196 · Published 2025-09-24 · No fix listed CWE-78
Open these records in search → All records by CVSS severity
1 3 2 1 0
THREATIST.IORead the docs