dataease dataease vulnerabilities
92 published CVEs name dataease dataease among the affected products.
- 92Published CVEs92 of them scored
- 44Last 12 monthspublished in the last year
- 13Critical63 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-102755
DataEase Datasource/Dataset Folder Name Stored Cross-Site Scripting
dataease · dataease
Medium5.1 - CVE-2026-102756
DataEase bar-horizontal Axis Label Tooltip Stored Cross-Site Scripting
dataease · dataease
Medium5.1 - CVE-2026-104143
DataEase: Stored SQL Injection via dateFormat field templates
dataease · dataease
High8.7 - CVE-2026-104142
DataEase: Stored SQL Injection in group-field binning bounds
dataease · dataease
High8.7 - CVE-2026-104141
DataEase: SQL Injection in datasource metadata identifiers
dataease · dataease
High8.7 - CVE-2023-40772
A directory Traversal vulnerability in DataEase before 1.18.10 allows a remote attacker to obtain sensitive information via a a crafted request to the…
DataEase · DataEase
Medium4.3 - CVE-2026-82879
DataEase before 2.10.26 Access Control Bypass via Share Tickets
dataease · dataease
Medium5.3 - CVE-2026-82878
DataEase before 2.10.26 Missing Object-Level Authorization on Geographic, Linkage and Chart Endpoints
dataease · dataease
Medium5.3 - CVE-2026-45532
DataEase has a Path Traversal Vulnerability
dataease · dataease
High8.7 - CVE-2026-49867
DataEase: Authenticated Stored XSS in DataEase Template Static Resources
dataease · dataease
Medium6.3