Vulnerabilities

Filters

2 selected

72 records

Sort

Vendor: dataease Component: Dataease Clear all filters

TI-2026-07666 CVE-2026-8724 · GHSA-74x6-944v-7pxp

Dataease Data Dashboard SqlparserUtils.java SqlparserUtils.transFilter sql injection

MEDIUM 56

A security flaw has been discovered in Dataease 2.10.20.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00387 Published 2026-05-17 No fix listed CWE-74

TI-2026-29557 CVE-2026-40901

DataEase: Quartz Deserialization → Remote Code Execution

HIGH 68

DataEase is an open-source data visualization and analytics platform.

CVSS 4.0HIGH 7.5 Network Low privileges No interaction EPSS 0.0063 Published 2026-04-16 Fixed in 2.10.21 CWE-502

TI-2026-29556 CVE-2026-40900

DataEase has SQL Injection via Stacked Queries

HIGH 79

DataEase is an open-source data visualization and analytics platform.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00342 Published 2026-04-16 Fixed in 2.10.21 CWE-89

TI-2026-29555 CVE-2026-40899

DataEase has an Arbitrary File Read Vulnerability

LOW 36

DataEase is an open-source data visualization and analytics platform.

CVSS 4.0HIGH 8.3 Network Low privileges No interaction EPSS 0.00388 Published 2026-04-16 Fixed in 2.10.21 CWE-183

TI-2026-25628 CVE-2026-33207

DataEase SQL Injection Vulnerability

HIGH 72

DataEase is an open-source data visualization and analytics platform.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00349 Published 2026-04-16 Fixed in 2.10.21 CWE-89

TI-2026-25554 CVE-2026-33122

DataEase has SQL Injection via Datasource Management

HIGH 72

DataEase is an open-source data visualization and analytics platform.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00405 Published 2026-04-16 Fixed in 2.10.21 CWE-89

TI-2026-25553 CVE-2026-33121

DataEase has SQL Injection via Datasource Save Flow

HIGH 79

DataEase is an open-source data visualization and analytics platform.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00328 Published 2026-04-16 Fixed in 2.10.21 CWE-89

TI-2026-25526 CVE-2026-33084

DataEase has SQL Injection through its getFieldEnumObj Endpoint

MEDIUM 40

DataEase is an open-source data visualization and analytics platform.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00328 Published 2026-04-16 Fixed in 2.10.21 CWE-89

TI-2026-25525 CVE-2026-33083

DataEase has SQL Injection in Order By Clause

HIGH 73

DataEase is an open-source data visualization and analytics platform.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00328 Published 2026-04-16 Fixed in 2.10.21 CWE-89

TI-2026-25524 CVE-2026-33082

DataEase: SQL Injection in v2 Dataset Export

HIGH 73

DataEase is an open source data visualization analysis tool.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00325 Published 2026-04-16 Fixed in 2.10.21 CWE-89

TI-2026-25387 CVE-2026-32939

DataEase is Vulnerable to H2 JDBC RCE Bypass

HIGH 69

DataEase is an open source data visualization analysis tool.

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00475 Published 2026-03-20 Fixed in 2.10.20 CWE-178

TI-2026-24677 CVE-2026-32140

Dataease: Redshift JDBC RCE Bypass

HIGH 81

Dataease is an open source data visualization analysis tool.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00786 Published 2026-03-12 Fixed in 2.10.20 CWE-22

TI-2026-24676 CVE-2026-32139

Dataease: Unfiltered active SVG content leads to Stored XSS

MEDIUM 63

Dataease is an open source data visualization analysis tool.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00234 Published 2026-03-12 Fixed in 2.10.20 CWE-79

TI-2026-24674 CVE-2026-32137

DataEase SQL Injection Vulnerability

HIGH 81

Dataease is an open source data visualization analysis tool.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00475 Published 2026-03-12 Fixed in 2.10.20 CWE-89

TI-2026-19300 CVE-2026-23958

DataEase Vulnerable to Brute-Force Attack on Admin JWT Secret Derived from Password that Enables Full Account Takeover

HIGH 71

Dataease is an open source data visualization analysis tool.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.0052 Published 2026-01-22 Fixed in 2.10.19 CWE-522

TI-2025-39841 CVE-2025-64428

DataEase DB2 JNDI Vulnerability

HIGH 80

Dataease is an open source data visualization analysis tool.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.0062 Published 2025-11-20 Fixed in 2.10.17 CWE-74

TI-2025-39609 CVE-2025-64164

DataEase is vulnerable to Oracle JNDI Injection

HIGH 74

Dataease is an open source data visualization analysis tool.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00625 Published 2025-11-06 Fixed in 2.10.15 CWE-502

TI-2025-39608 CVE-2025-64163

DataEase's DB2 is vulnerable to SSRF

HIGH 72

DataEase is an open source data visualization analysis tool.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.01156 Published 2025-11-05 Fixed in 2.10.15 CWE-918

TI-2025-38686 CVE-2025-62419

DataEase vulnerable to JDBC URL injection in DB2 and MongoDB data source configuration

MEDIUM 42

DataEase is a data visualization and analytics platform.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00431 Published 2025-10-17 Fixed in 2.10.14 CWE-502

TI-2025-38687 CVE-2025-62420

DataEase vulnerable to remote code execution via H2 JDBC driver bypass

HIGH 75

DataEase is a data visualization and analytics platform.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.01027 Published 2025-10-17 Fixed in 2.10.14 CWE-502

TI-2025-38688 CVE-2025-62421

DataEase vulnerable to stored cross-site scripting via file upload bypass

LOW 31

DataEase is a data visualization and analytics platform.

CVSS 4.0MEDIUM 5.5 Network No auth No interaction EPSS 0.00279 Published 2025-10-17 Fixed in 2.10.14 CWE-79

TI-2025-38689 CVE-2025-62422

DataEase SQL injection vulnerability

HIGH 73

DataEase is an open source data visualization and analytics platform.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00524 Published 2025-10-17 Fixed in 2.10.14 CWE-89

TI-2025-36406 CVE-2025-58748

Dataease H2 data source JDBC URL validation bypass leads to remote code execution

MEDIUM 47

Dataease is an open source data analytics and visualization platform.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00832 Published 2025-09-15 Fixed in 2.10.13 CWE-502

TI-2025-35889 CVE-2025-58046

Dataease has a JDBC attack vulnerability in the Impala datasource

HIGH 79

Dataease is an open-source data visualization and analysis platform.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01429 Published 2025-09-15 Fixed in 2.10.13 CWE-502

TI-2025-35888 CVE-2025-58045

Dataease server-side request forgery via unfiltered DB2 JDBC ldap parameter

HIGH 70

Dataease is an open source data analytics and visualization platform.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00702 Published 2025-09-15 Fixed in 2.10.13 CWE-918