Login Request a demo
DA
Vendor
dataease
2 products with CVEs on record
118
CVEs
0
On KEV
6
New 30D
Products
DA
dataease
dataease
9.8
103 CVEs0 on KEV6 new
SQ
SQLbot
dataease
8.8
15 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-102755
DA
dataease
dataease
5.1
0%
Oct 14DataEase Datasource/Dataset Folder Name Stored Cross-Site Scripting
CVE-2026-102756
DA
dataease
dataease
5.1
0%
Oct 14DataEase bar-horizontal Axis Label Tooltip Stored Cross-Site Scripting
CVE-2026-104143
DA
dataease
dataease
8.7
0%
Oct 14DataEase: Stored SQL Injection via dateFormat field templates
CVE-2026-104142
DA
dataease
dataease
8.7
0%
Oct 14DataEase: Stored SQL Injection in group-field binning bounds
CVE-2026-104141
DA
dataease
dataease
8.7
0%
Oct 14DataEase: SQL Injection in datasource metadata identifiers
CVE-2026-108824
DA
DataEase
Dataease
6.3
0%
Oct 12DataEase Utils.java Utils.buildCalcField sql injection
CVE-2026-93660
SQ
SQLBot
dataease
6.5
0%
Sep 18SQLBot through 1.10.1 Improper Access Control via Dashboard Update
CVE-2026-53557
SQ
SQLBot
dataease
7.7
0%
Sep 17SQLBot: Second-Order SQL Injection via Excel Datasource Leading to Remote Command Execution
CVE-2026-53555
SQ
SQLBot
dataease
5.1
0%
Sep 17Stored XSS via SVG Upload
CVE-2026-53556
SQ
SQLBot
dataease
6.0
0%
Sep 17SQLBot: Authenticated SQL Injection in previewData Resulting in Arbitrary File Read
CVE-2026-53554
SQ
SQLBot
dataease
7.3
0%
Sep 17SQLBot: Arbitrary File Write via parseExcel Leading to Code Execution Through Alembic Import Processing
CVE-2023-40772
DA
DataEase
DataEase
4.3
1%
Sep 14A directory Traversal vulnerability in DataEase before 1.18.10 allows a remote attacker to obtain sensitive information via a a crafted request to the…
CVE-2026-90529
DA
DataEase
Dataease
3.5
0%
Sep 13DataEase Symbolic Map symbolic-map.ts buildTooltip cross site scripting
CVE-2026-82879
DA
dataease
dataease
6.3
0%
Aug 31DataEase before 2.10.26 Access Control Bypass via Share Tickets
CVE-2026-82878
DA
dataease
dataease
6.3
0%
Aug 31DataEase before 2.10.26 Missing Object-Level Authorization on Geographic, Linkage and Chart Endpoints
CVE-2026-45532
DA
dataease
dataease
8.7
1%
Aug 18DataEase has a Path Traversal Vulnerability
CVE-2026-72743
SQ
SQLBot
dataease
5.4
0%
Aug 10SQLBot 1.10.0 SQText Dashboard Component Stored XSS via v-html
CVE-2026-49867
DA
dataease
dataease
6.3
0%
Jul 15DataEase: Authenticated Stored XSS in DataEase Template Static Resources
CVE-2026-46684
DA
dataease
dataease
9.5
0%
Jul 15DataEase: Unauthorized Command Execution Vulnerability
CVE-2026-45320
DA
dataease
dataease
8.7
0%
Jul 15DataEase Data Dashboard SqlVariable transFilter Unfiltered SQL Injection
CVE-2026-45535
DA
dataease
dataease
8.7
0%
Jul 15DataEase: Stored SQL Injection Vulnerability
CVE-2026-45533
DA
dataease
dataease
8.3
0%
Jul 15DataEase: Path Traversal Vulnerability
CVE-2026-50124
DA
dataease
dataease
7.1
1%
Jul 15DataEase: Remote Code Execution (RCE) via Zip Protocol & File Dropper
CVE-2026-50030
DA
dataease
dataease
7.1
0%
Jul 15DataEase: Arbitrary SQL execution in preview path (direct data disclosure)
CVE-2026-45419
DA
dataease
dataease
8.5
0%
Jul 15DataEase: Arbitrary File Write Vulnerability
CVE-2026-45417
DA
dataease
dataease
8.7
0%
Jul 15DataEase: SQL injection vulnerability
CVE-2026-45534
DA
dataease
dataease
9.0
1%
Jul 15DataEase: RCE Vulnerability
CVE-2026-50530
DA
dataease
dataease
7.1
0%
Jul 7DataEase: Token with Overly Broad Privileges in Share Mode: Access to Unshared Datasets
CVE-2026-50529
DA
dataease
dataease
8.7
0%
Jul 7DataEase: Link Token Leakage Prior to Share Password/Ticket Validation
CVE-2026-55647
DA
dataease
dataease
5.1
0%
Jul 7DataEase: authenticated stored XSS in the dashboard text components
CVE-2026-55635
DA
dataease
dataease
8.7
0%
Jul 7DataEase: Authenticated SQL Injection in Chart Quota Filters
CVE-2026-57172
DA
dataease
dataease
8.3
0%
Jul 7DataEase: Hardcoded JWT Signing Secret in ShareLink
CVE-2026-53751
DA
dataease
dataease
8.7
1%
Jul 7DataEase: H2 JDBC URL Filter Bypass Leads to Remote Code Execution (RCE)
CVE-2026-53730
DA
dataease
dataease
8.7
0%
Jul 7DataEase: Unauthorized Access to Engine Database via previewSql Endpoint
CVE-2026-55633
DA
dataease
dataease
8.7
1%
Jul 7DataEase H2 RCE via Zip Protocol & File Dropper Fix bypass
CVE-2026-55631
DA
dataease
dataease
7.2
0%
Jul 7DataEase: Path Traversal Leading to Arbitrary File Deletion via Font Management
CVE-2026-53729
DA
dataease
dataease
8.7
1%
Jul 7DataEase ExportCenter IDOR allows cross-user export task access
CVE-2026-8724
DA
Dataease
Dataease
7.2
0%
May 17Dataease Data Dashboard SqlparserUtils.java SqlparserUtils.transFilter sql injection
CVE-2026-42463
SQ
SQLBot
dataease
8.1
0%
May 13SQLBot: Unauthorized Access Vulnerability
CVE-2026-33324
SQ
SQLBot
dataease
8.8
1%
May 5SQLBot prompt injection allows arbitrary SQL execution and remote code execution
CVE-2026-40901
DA
dataease
dataease
8.8
1%
Apr 16DataEase: Quartz Deserialization → Remote Code Execution
CVE-2026-40900
DA
dataease
dataease
8.8
0%
Apr 16DataEase has SQL Injection via Stacked Queries
CVE-2026-40899
DA
dataease
dataease
6.5
0%
Apr 16DataEase has an Arbitrary File Read Vulnerability
CVE-2026-33207
DA
dataease
dataease
8.8
0%
Apr 16DataEase SQL Injection Vulnerability
CVE-2026-33122
DA
dataease
dataease
9.8
0%
Apr 16DataEase has SQL Injection via Datasource Management
CVE-2026-33121
DA
dataease
dataease
8.8
0%
Apr 16DataEase has SQL Injection via Datasource Save Flow
CVE-2026-33084
DA
dataease
dataease
8.8
0%
Apr 16DataEase has SQL Injection through its getFieldEnumObj Endpoint
CVE-2026-33083
DA
dataease
dataease
8.8
0%
Apr 16DataEase has SQL Injection in Order By Clause
CVE-2026-33082
DA
dataease
dataease
9.8
0%
Apr 16DataEase: SQL Injection in v2 Dataset Export
CVE-2026-5417
SQ
SQLbot
Dataease
4.7
0%
Apr 2Dataease SQLbot Elasticsearch es_engine.py get_es_data_by_http server-side request forgery
CVE-2026-32950
SQ
SQLBot
dataease
8.8
1%
Mar 20SQLBot: RCE via SQL Injection in Excel Upload Endpoint
CVE-2026-32949
SQ
SQLBot
dataease
7.5
0%
Mar 20SQLBot: SSRF to Arbitrary File Read (AFR) via Rogue MySQL
CVE-2026-32939
DA
dataease
dataease
8.1
0%
Mar 20DataEase is Vulnerable to H2 JDBC RCE Bypass
CVE-2026-32622
SQ
SQLBot
dataease
8.8
1%
Mar 19SQLBot: Remote Code Execution via Terminology Poisoning
CVE-2026-32140
DA
dataease
dataease
8.8
1%
Mar 12Dataease: Redshift JDBC RCE Bypass
CVE-2026-32139
DA
dataease
dataease
5.4
0%
Mar 12Dataease: Unfiltered active SVG content leads to Stored XSS
CVE-2026-32137
DA
dataease
dataease
8.8
0%
Mar 12DataEase SQL Injection Vulnerability
CVE-2025-15598
SQ
SQLBot
Dataease
5.9
0%
Mar 3Dataease SQLBot JWT Token auth.py validateEmbedded signature verification
CVE-2025-15597
SQ
SQLBot
Dataease
6.3
1%
Mar 2Dataease SQLBot API Endpoint assistant.py access control
CVE-2026-23958
DA
dataease
dataease
9.8
1%
Jan 22DataEase Vulnerable to Brute-Force Attack on Admin JWT Secret Derived from Password that Enables Full Account Takeover