Vulnerabilities

TI-2025-40445 CVE-2025-65792 · GHSA-6w2r-qvmx-2ff5

DataGear v5.5.0 is vulnerable to Arbitrary File Deletion.

HIGH 78

DataGear v5.5.0 is vulnerable to Arbitrary File Deletion.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00507 Published 2025-12-10 No fix listed CWE-22

TI-2023-06669 CVE-2023-7299 · GHSA-wh54-vv47-2265

DataGear resolveSql sql injection

LOW 25

A vulnerability was found in DataGear up to 4.60.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0064 Published 2024-11-23 No fix listed CWE-74

TI-2024-07000 CVE-2024-7552 · GHSA-g4q9-9x6g-wwh5

DataGear Data Schema Page ConversionSqlParamValueMapper.java evaluateVariableExpression expression language injection

MEDIUM 59

A vulnerability was found in DataGear up to 5.0.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0059 Published 2024-08-06 No fix listed CWE-917

TI-2024-25135 CVE-2024-37759 · GHSA-7gh6-h622-qxjx

DataGear v5.0.0 and earlier was discovered to contain a SpEL (Spring Expression Language)…

HIGH 82

DataGear v5.0.0 and earlier was discovered to contain a SpEL (Spring Expression Language) expression injection vulnerability via the Data Viewing interface.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0282 Published 2024-06-24 No fix listed CWE-74

TI-2023-01919 CVE-2023-2042 · GHSA-94rv-4qh8-r994

DataGear JDBC Server deserialization

LOW 26

A vulnerability, which was classified as problematic, has been found in DataGear up to 4.7.0/5.1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.01137 Published 2023-04-14 No fix listed CWE-502

TI-2023-01665 CVE-2023-1772 · GHSA-pp3c-rj85-cc8g

DataGear Diagram Type cross site scripting

LOW 23

A vulnerability was found in DataGear up to 4.5.1.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00599 Published 2023-03-31 No fix listed CWE-79

TI-2023-01485 CVE-2023-1573 · GHSA-345x-9phv-xfwq

DataGear Graph Dataset cross site scripting

LOW 28

A vulnerability was found in DataGear up to 1.11.1 and classified as problematic.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0063 Published 2023-03-22 No fix listed CWE-79

TI-2023-01483 CVE-2023-1571 · GHSA-63wp-2cpc-rcwf

DataGear pagingQueryData sql injection

MEDIUM 44

A vulnerability, which was classified as critical, was found in DataGear up to 4.5.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00915 Published 2023-03-22 No fix listed CWE-89

TI-2023-01484 CVE-2023-1572 · GHSA-f792-rc34-g659

DataGear Plugin cross site scripting

LOW 25

A vulnerability has been found in DataGear up to 1.11.1 and classified as problematic.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00542 Published 2023-03-22 No fix listed CWE-79

Vulnerabilities

Filters