Skip to contentDataease vulnerabilities
Newest
- dataease sqlbotDataease SQLbot Elasticsearch es_engine.py get_es_data_by_http server-side request forgeryCVE-2026-54175.1 Medium
- dataease sqlbotSQLBot: RCE via SQL Injection in Excel Upload EndpointCVE-2026-329508.6 High
- dataease sqlbotSQLBot: SSRF to Arbitrary File Read (AFR) via Rogue MySQLCVE-2026-329498.7 High
- dataeaseDataEase is Vulnerable to H2 JDBC RCE BypassCVE-2026-329397.7 High
- dataease sqlbotSQLBot: Remote Code Execution via Terminology PoisoningCVE-2026-326228.6 High
- dataeaseDataease: Redshift JDBC RCE BypassCVE-2026-321409.3 Critical
- dataeaseDataease: Unfiltered active SVG content leads to Stored XSSCVE-2026-321395.3 Medium
- dataeaseDataEase SQL Injection VulnerabilityCVE-2026-321379.3 Critical
- dataease sqlbotDataease SQLBot JWT Token auth.py validateEmbedded signature verificationCVE-2025-155986.3 Medium
- dataease sqlbotDataease SQLBot API Endpoint assistant.py access controlCVE-2025-155975.3 Medium
- dataeaseDataEase Vulnerable to Brute-Force Attack on Admin JWT Secret Derived from Password that Enables Full Account TakeoverCVE-2026-239588.8 High
- dataease sqlbotSQLBot uploadExcel Endpoint has Unauthenticated Arbitrary File Upload vulnerabilityCVE-2025-692857.7 High
- dataeaseDataEase DB2 JNDI VulnerabilityCVE-2025-644288.9 High
- dataeaseDataEase is vulnerable to Oracle JNDI InjectionCVE-2025-641648.9 High
- dataeaseDataEase's DB2 is vulnerable to SSRFCVE-2025-641638.9 High
- dataeaseDataEase vulnerable to JDBC URL injection in DB2 and MongoDB data source configurationCVE-2025-624198.2 High
- dataeaseDataEase vulnerable to remote code execution via H2 JDBC driver bypassCVE-2025-624208.2 High
- dataeaseDataEase vulnerable to stored cross-site scripting via file upload bypassCVE-2025-624215.5 Medium
- dataeaseDataEase SQL injection vulnerabilityCVE-2025-624228.7 High
- dataeaseDataease H2 data source JDBC URL validation bypass leads to remote code executionCVE-2025-587488.7 High
- dataeaseDataease has a JDBC attack vulnerability in the Impala datasourceCVE-2025-580468.7 High
- dataeaseDataease server-side request forgery via unfiltered DB2 JDBC ldap parameterCVE-2025-580457.1 High
- dataeaseDataease H2 JDBC RCE BypassCVE-2025-57772EPSS 10.9%8.2 High
- dataeaseDataease DB2 Aspectweaver Deserialization Arbitrary File Write VulnerabilityCVE-2025-577738.2 High
- dataeaseDataease PostgreSQL & Redshift Data Source JDBC Connection Parameters Bypass VulnerabilityCVE-2025-530068.9 High
- dataeaseDataease PostgreSQL Data Source JDBC Connection Parameters Bypass VulnerabilityCVE-2025-530058.9 High
- dataeaseDataease Redshift Data Source JDBC Connection Parameters Bypass VulnerabilityCVE-2025-530048.9 High
- dataeaseDataease H2 JDBC Connection Remote Code ExecutionCVE-2025-490038.9 High
- dataeaseDataease H2 Database Remote Code Execution (RCE) Bypass VulnerabilityCVE-2025-49002Public exploitEPSS 50.7%8.2 High
- dataeaseDataease Authentication Bypass VulnerabilityCVE-2025-49001EPSS 23.1%7.7 High
- dataeaseDataease Redshift Data Source JDBC Connection Parameters Not Verified Leads to RCE VulnerabilityCVE-2025-48999EPSS 11.2%6.8 Medium
- dataeaseDataease MYSQL JDBC File Reading VulnerabilityCVE-2025-489987.3 High
- dataeaseDataease redshift JDBC Connection Remote Code ExecutionCVE-2025-465666.8 Medium
- dataeaseDataease H2 JDBC Connection Remote Code ExecutionCVE-2025-329668.2 High
- dataeaseDataEase has an improper authentication vulnerabilityCVE-2025-271387.7 High
- dataeaseDataease Mysql JDBC Connection Parameters Not Being Verified Leads to Arbitrary File Read VulnerabilityCVE-2025-271037.3 High
- dataeaseDataEase Mysql JDBC Connection Parameters Not Being Verified Leads to Arbitrary File Read VulnerabilityCVE-2025-249747.3 High
- dataeaseAn issue in DataEase v1 allows an attacker to execute arbitrary code via the user account and...CVE-2024-577079.8 Critical
- dataeaseDataEase has an unauthorized vulnerabilityCVE-2024-56511EPSS 50.3%9.3 Critical
- dataeaseDataease Redshift Data Source JDBC Connection Parameters Not Verified Leads to RCE VulnerabilityCVE-2024-559528.6 High
- dataeaseDataease Mysql JDBC Connection Parameters Not Verified Leads to Deserialization and Arbitrary File Read VulnerabilityCVE-2024-559538.6 High
- dataeaseDataEase has a forged JWT token vulnerabilityCVE-2024-522959.3 Critical
- dataeaseDataease arbitrary interface access vulnerabilityCVE-2024-470739.3 Critical
- dataeaseDataease PostgreSQL Data Source JDBC Connection Parameters Not Verified Leads to Deserialization VulnerabilityCVE-2024-470749.3 Critical
- dataeaseDataEase's H2 datasource has a remote command execution riskCVE-2024-46997Fix available9.8 Critical
- dataeaseDataEase has an XXE vulnerabilityCVE-2024-46985Fix available7.5 High
- dataeaseArbitrary File Reading in DataEaseCVE-2024-314417.5 High
- dataeaseDataEase has database configuration information exposure vulnerabilityCVE-2024-30269Public exploitEPSS 15.9%5.3 Medium
- dataeaseThe Dataease datasource exists deserialization and arbitrary file read vulnerabilityCVE-2024-233289.1 Critical
- dataeaseDataEase has a vulnerability to obtain user cookiesCVE-2023-401837.5 High
- Show moreLoading…