CVE-2025-32966highCWE-290

CVE-2025-32966: high-severity vulnerability in dataease

Dataease H2 JDBC Connection Remote Code Execution

Published

Follow this CVE+ Monitor dataease

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

36Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendcvss 8.2epss 4.5%
In short

DataEase, a business intelligence tool, allows authenticated users to execute arbitrary code on the server through a malicious JDBC database connection. This means someone with login access can take complete control of the system.

Technical detail

Authenticated users can achieve remote code execution by crafting a malicious JDBC connection string in the backend database link configuration. The vulnerability exists in DataEase versions prior to 2.10.8 and requires valid authentication credentials as a precondition; successful exploitation grants arbitrary code execution on the server with application privileges.

Summary generated and translated by AI from the official description.
DataEase is an open-source BI tool alternative to Tableau. Prior to version 2.10.8, authenticated users can complete RCE through the backend JDBC link. This issue has been patched in version 2.10.8.
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Affected products
dataease · dataease
Related CVEs — dataease

In the same product, most dangerous first.

CVE-2025-49002HIGHDataease H2 Database Remote Code Execution (RCE) Bypass VulnerabilityEPSS 50.4%CVE-2024-56511CRITICALDataEase has an unauthorized vulnerabilityEPSS 50.3%CVE-2025-49001HIGHDataease Authentication Bypass VulnerabilityEPSS 22.0%CVE-2024-30269MEDIUMDataEase has database configuration information exposure vulnerabilityEPSS 15.9%CVE-2025-57772HIGHDataease H2 JDBC RCE BypassEPSS 10.9%CVE-2025-48999MEDIUMDataease Redshift Data Source JDBC Connection Parameters Not Verified Leads to RCE VulnerabilityEPSS 10.4%