Login Request a demo
DA
Product
dataease
by dataease · last CVE Oct 14, 2026
103
CVEs
0
On KEV
9.8
Max CVSS
6
New 30D
Vulnerabilities103In the news0Timeline
Severity mix
Critical 35High 46Medium 21Low 1
Severity
All severities103Critical35High46Medium21Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add dataease to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-33122
9.8
0%
Apr 16
DataEase has SQL Injection via Datasource Management
Affected: < 2.10.21
CVE-2026-33082
9.8
0%
Apr 16
DataEase: SQL Injection in v2 Dataset Export
Affected: < 2.10.21
CVE-2026-23958
9.8
1%
Jan 22
DataEase Vulnerable to Brute-Force Attack on Admin JWT Secret Derived from Password that Enables Full Account Takeover
Affected: < 2.10.19
CVE-2025-64428
9.8
1%
Nov 20
DataEase DB2 JNDI Vulnerability
Affected: < 2.10.17
CVE-2025-64164
9.8
1%
Nov 6
DataEase is vulnerable to Oracle JNDI Injection
Affected: < 2.10.15
CVE-2025-64163
9.8
1%
Nov 5
DataEase's DB2 is vulnerable to SSRF
Affected: < 2.10.15
CVE-2025-58748
9.8
1%
Sep 15
Dataease H2 data source JDBC URL validation bypass leads to remote code execution
Affected: < 2.10.13
CVE-2025-58046
9.8
1%
Sep 15
Dataease has a JDBC attack vulnerability in the Impala datasource
Affected: < 2.10.13
CVE-2025-58045
9.8
1%
Sep 15
Dataease server-side request forgery via unfiltered DB2 JDBC ldap parameter
Affected: < 2.10.13
CVE-2025-57772
9.8
11%
Aug 25
Dataease H2 JDBC RCE Bypass
Affected: < 2.10.12
CVE-2025-57773
9.8
10%
Aug 25
Dataease DB2 Aspectweaver Deserialization Arbitrary File Write Vulnerability
Affected: < 2.10.12
CVE-2025-53006
9.8
1%
Jul 2
Dataease PostgreSQL & Redshift Data Source JDBC Connection Parameters Bypass Vulnerability
Affected: < 2.10.11
CVE-2025-53005
9.8
1%
Jul 1
Dataease PostgreSQL Data Source JDBC Connection Parameters Bypass Vulnerability
Affected: < 2.10.11
CVE-2025-53004
9.8
1%
Jun 30
Dataease Redshift Data Source JDBC Connection Parameters Bypass Vulnerability
Affected: < 2.10.11
CVE-2025-49003
9.8
1%
Jun 26
Dataease H2 JDBC Connection Remote Code Execution
Affected: < 2.10.11
CVE-2025-49002
9.8
50%
Jun 3
Dataease H2 Database Remote Code Execution (RCE) Bypass Vulnerability
Affected: < 2.10.10
CVE-2025-49001
9.8
22%
Jun 3
Dataease Authentication Bypass Vulnerability
Affected: < 2.10.10
CVE-2025-46566
9.8
1%
May 1
Dataease redshift JDBC Connection Remote Code Execution
Affected: < 2.10.9
CVE-2025-32966
9.8
4%
Apr 23
Dataease H2 JDBC Connection Remote Code Execution
Affected: < 2.10.8
CVE-2025-27138
9.8
1%
Mar 13
DataEase has an improper authentication vulnerability
Affected: < 2.10.6
CVE-2024-57707
9.8
1%
Feb 7
An issue in DataEase v1 allows an attacker to execute arbitrary code via the user account and password components
Affected: 1.0.0
CVE-2024-56511
9.8
50%
Jan 10
DataEase has an unauthorized vulnerability
Affected: < 2.10.4
CVE-2024-52295
9.8
1%
Nov 13
DataEase has a forged JWT token vulnerability
Affected: < 2.10.2
CVE-2024-47074
9.8
1%
Oct 11
Dataease PostgreSQL Data Source JDBC Connection Parameters Not Verified Leads to Deserialization Vulnerability
Affected: < 1.18.25
CVE-2024-46997
9.8
1%
Sep 23
DataEase's H2 datasource has a remote command execution risk
Affected: < 2.10.1
CVE-2023-37258
9.8
1%
Jul 25
DataEase is an open source data visualization analysis tool
Affected: before 1.18.9
CVE-2023-33963
9.8
1%
Jun 1
DataEase is an open source data visualization and analysis tool
Affected: before 1.18.7
CVE-2023-28437
9.8
1%
Mar 25
Dataease is an open source data visualization and analysis tool
Affected: before 1.18.5
CVE-2022-39312
9.8
2%
Oct 25
Dataease Mysql Data Source JDBC Connection Parameters Not Verified Leads to Deserialization Vulnerability
Affected: < 1.15.2
CVE-2022-34115
9.8
1%
Jul 22
DataEase v1.11.1 was discovered to contain a arbitrary file write vulnerability via the parameter dataSourceId
Affected: 1.11.1
CVE-2022-34113
9.8
1%
Jul 22
An issue in the component /api/plugin/upload of Dataease v1.11.1 allows attackers to execute arbitrary code via a crafted plugin
Affected: 1.11.1
CVE-2026-46684
9.5
0%
Jul 15
DataEase: Unauthorized Command Execution Vulnerability
Affected: < 2.10.23
CVE-2024-47073
9.1
1%
Nov 7
Dataease arbitrary interface access vulnerability
Affected: < 2.10.2
CVE-2024-23328
9.1
1%
Feb 1
The Dataease datasource exists deserialization and arbitrary file read vulnerability
Affected: < 1.18.15; >= 2.0.0, < 2.3.0
CVE-2026-45534
9.0
1%
Jul 15
DataEase: RCE Vulnerability
Affected: < 2.10.23
CVE-2026-40901
8.8
1%
Apr 16
DataEase: Quartz Deserialization → Remote Code Execution
Affected: < 2.10.21
CVE-2026-40900
8.8
0%
Apr 16
DataEase has SQL Injection via Stacked Queries
Affected: < 2.10.21
CVE-2026-33207
8.8
0%
Apr 16
DataEase SQL Injection Vulnerability
Affected: < 2.10.21
CVE-2026-33121
8.8
0%
Apr 16
DataEase has SQL Injection via Datasource Save Flow
Affected: < 2.10.21
CVE-2026-33084
8.8
0%
Apr 16
DataEase has SQL Injection through its getFieldEnumObj Endpoint
Affected: < 2.10.21
CVE-2026-33083
8.8
0%
Apr 16
DataEase has SQL Injection in Order By Clause
Affected: < 2.10.21
CVE-2026-32140
8.8
1%
Mar 12
Dataease: Redshift JDBC RCE Bypass
Affected: < 2.10.20
CVE-2026-32137
8.8
0%
Mar 12
DataEase SQL Injection Vulnerability
Affected: < 2.10.20
CVE-2025-62420
8.8
1%
Oct 17
DataEase vulnerable to remote code execution via H2 JDBC driver bypass
Affected: < 2.10.14
CVE-2025-62422
8.8
1%
Oct 17
DataEase SQL injection vulnerability
Affected: < 2.10.14
CVE-2025-48999
8.8
10%
Jun 3
Dataease Redshift Data Source JDBC Connection Parameters Not Verified Leads to RCE Vulnerability
Affected: < 2.10.10
CVE-2025-48998
8.8
0%
Jun 3
Dataease MYSQL JDBC File Reading Vulnerability
Affected: < 2.10.10
CVE-2024-55952
8.8
1%
Dec 18
Dataease Redshift Data Source JDBC Connection Parameters Not Verified Leads to RCE Vulnerability
Affected: < 1.18.27
CVE-2023-28637
8.8
1%
Mar 28
DataEase is an open source data visualization analysis tool
Affected: before 1.18.5
CVE-2022-34114
8.8
1%
Jul 22
Dataease v1.11.1 was discovered to contain a SQL injection vulnerability via the parameter dataSourceId
Affected: 1.11.1
Page 1 of 3 · 103 total
123