Skip to contentDataease vulnerabilities
Newest
- dataeaseDataEase vulnerable to SQL injectionCVE-2023-407717.5 High
- dataeaseDataEase has a SQL injection vulnerability that can bypass blacklistsCVE-2023-372588.8 High
- dataeaseThe DataEase panel and dataset have a stored XSS vulnerabilityCVE-2023-372575.4 Medium
- dataeaseUnauthorized users can manipulate a dashboard created by an administrator in DataEaseCVE-2023-351646.3 Medium
- dataeaseUnauthorized users can delete applications in DataEaseCVE-2023-344638.1 High
- dataeaseDataEase has a privilege bypass vulnerabilityCVE-2023-351686.5 Medium
- dataeaseDataEase data source has deserialization vulnerabilityCVE-2023-339639.8 Critical
- dataeaseDataEase API interface has IDOR vulnerabilityCVE-2023-32310Fix available8.1 High
- dataeaseDataEase AWS redshift data source exists for remote code execution vulnerabilityCVE-2023-286378.0 High
- dataeaseSQL injection vulnerability due to the keyword blacklist for defending against SQL injection will be bypassedCVE-2023-284379.8 Critical
- dataeaseDataease file upload interface does not verify permission or file typeCVE-2023-284356.5 Medium
- dataeaseDataEase dashboard has a stored XSS vulnerabilityCVE-2023-258077.2 High
- dataeaseSQL Injection vulnerability in dataease before 1.2.0, allows attackers to gain sensitive...CVE-2021-382397.5 High
- dataeaseDataease Mysql Data Source JDBC Connection Parameters Not Verified Leads to Deserialization VulnerabilityCVE-2022-39312Fix available9.8 Critical
- dataeaseSQL Injection found in DataeaseCVE-2022-34114Fix available8.8 High
- dataeaseDataease before 1.11.2 access control issue allows attackers to arbitrarily uninstall pluginCVE-2022-34112Fix available6.5 Medium
- dataeaseDataease before 1.11.2 allows arbitrary code execution via crafter pluginCVE-2022-34113Fix available9.8 Critical
- dataeaseDataease v1.11.1 SQL Injection via parameter dataSourceIdCVE-2022-34115Fix available9.8 Critical
- dataeaseIn DataEase v1.6.1, an authenticated user can gain unauthorized access to all user information...CVE-2022-233318.8 High