dataease vulnerabilities
109 published CVEs name dataease among the affected products.
- 109Published CVEs109 of them scored
- 61Last 12 monthspublished in the last year
- 14Critical71 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-129127
SQLBot through 1.10.3 Weak Password Hashing via Unsalted MD5
dataease · SQLBot
Medium5.9 - CVE-2026-121453
SQLBot through 1.10.3 Path Traversal via datasource importToDb Endpoint
dataease · SQLBot
Medium5.1 - CVE-2026-102755
DataEase Datasource/Dataset Folder Name Stored Cross-Site Scripting
dataease · dataease
Medium5.1 - CVE-2026-102756
DataEase bar-horizontal Axis Label Tooltip Stored Cross-Site Scripting
dataease · dataease
Medium5.1 - CVE-2026-104143
DataEase: Stored SQL Injection via dateFormat field templates
dataease · dataease
High8.7 - CVE-2026-104142
DataEase: Stored SQL Injection in group-field binning bounds
dataease · dataease
High8.7 - CVE-2026-104141
DataEase: SQL Injection in datasource metadata identifiers
dataease · dataease
High8.7 - CVE-2026-93660
SQLBot through 1.10.1 Improper Access Control via Dashboard Update
dataease · SQLBot
High7.1 - CVE-2026-53557
SQLBot: Second-Order SQL Injection via Excel Datasource Leading to Remote Command Execution
dataease · SQLBot
High7.7 - CVE-2026-53555
Stored XSS via SVG Upload
dataease · SQLBot
Medium5.1