DA
Product
dataease
103
CVEs
0
On KEV
9.8
Max CVSS
6
New 30D
Severity mix
Critical 35High 46Medium 21Low 1
Watch
Add dataease to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-40899 | 6.5 | Apr 16 | DataEase has an Arbitrary File Read Vulnerability Affected: < 2.10.21 |
| CVE-2025-27103 | 6.5 | Mar 13 | Dataease Mysql JDBC Connection Parameters Not Being Verified Leads to Arbitrary File Read Vulnerability Affected: < 2.10.6 |
| CVE-2025-24974 | 6.5 | Mar 13 | DataEase Mysql JDBC Connection Parameters Not Being Verified Leads to Arbitrary File Read Vulnerability Affected: < 2.10.6 |
| CVE-2023-35164 | 6.5 | Jun 26 | DataEase is an open source data visualization analysis tool to analyze data and gain insight into business trends Affected: before 1.18.8 |
| CVE-2023-35168 | 6.5 | Jun 26 | DataEase is an open source data visualization analysis tool to analyze data and gain insight into business trends Affected: before 1.18.8 |
| CVE-2022-34112 | 6.5 | Jul 22 | An access control issue in the component /api/plugin/uninstall Dataease v1.11.1 allows attackers to arbitrarily uninstall the plugin, a right normally reserved for the… Affected: 1.11.1 |
| CVE-2026-108824 | 6.3 | Oct 12 | DataEase Utils.java Utils.buildCalcField sql injection Affected: 3.0 |
| CVE-2026-82879 | 6.3 | Aug 31 | DataEase before 2.10.26 Access Control Bypass via Share Tickets Affected: before 2.10.26 |
| CVE-2026-82878 | 6.3 | Aug 31 | DataEase before 2.10.26 Missing Object-Level Authorization on Geographic, Linkage and Chart Endpoints Affected: before 2.10.26 |
| CVE-2026-49867 | 6.3 | Jul 15 | DataEase: Authenticated Stored XSS in DataEase Template Static Resources Affected: < 2.10.23 |
| CVE-2023-28435 | 6.1 | Mar 24 | Dataease is an open source data visualization and analysis tool Affected: before 1.18.5 |
| CVE-2026-32139 | 5.4 | Mar 12 | Dataease: Unfiltered active SVG content leads to Stored XSS Affected: < 2.10.20 |
| CVE-2025-62421 | 5.4 | Oct 17 | DataEase vulnerable to stored cross-site scripting via file upload bypass Affected: < 2.10.14 |
| CVE-2023-37257 | 5.4 | Jul 25 | The DataEase panel and dataset have a stored XSS vulnerability Affected: < 1.18.9 |
| CVE-2023-25807 | 5.4 | Feb 28 | DataEase is an open source data visualization and analysis tool Affected: before 1.18.3 |
| CVE-2024-30269 | 5.3 | Apr 8 | DataEase has database configuration information exposure vulnerability Affected: < 2.5.0 |
| CVE-2023-40183 | 5.3 | Sep 21 | DataEase has a vulnerability to obtain user cookies Affected: < 1.18.11 |
| CVE-2026-102755 | 5.1 | Oct 14 | DataEase Datasource/Dataset Folder Name Stored Cross-Site Scripting Affected: < 2.10.26 |
| CVE-2026-102756 | 5.1 | Oct 14 | DataEase bar-horizontal Axis Label Tooltip Stored Cross-Site Scripting Affected: < 2.10.26 |
| CVE-2026-55647 | 5.1 | Jul 7 | DataEase: authenticated stored XSS in the dashboard text components Affected: < 2.10.24 |
| CVE-2023-40772 | 4.3 | Sep 14 | A directory Traversal vulnerability in DataEase before 1.18.10 allows a remote attacker to obtain sensitive information via a a crafted request to the… Affected: before 1.18.10 |
Showing 21