Vulnerabilities in DataEase
108 resultsCVE-2026-55635HIGHDataEase: Authenticated SQL Injection in Chart Quota FiltersEPSS 0.4%CVE-2026-33122HIGHDataEase has SQL Injection via Datasource ManagementEPSS 0.4%CVE-2025-24974HIGHDataEase Mysql JDBC Connection Parameters Not Being Verified Leads to Arbitrary File Read VulnerabilityEPSS 0.4%CVE-2026-40899HIGHDataEase has an Arbitrary File Read VulnerabilityEPSS 0.4%CVE-2026-45535HIGHDataEase: Stored SQL Injection VulnerabilityEPSS 0.4%CVE-2026-45417HIGHDataEase: SQL injection vulnerabilityEPSS 0.4%CVE-2026-53730HIGHDataEase: Unauthorized Access to Engine Database via previewSql EndpointEPSS 0.4%CVE-2026-82879MEDIUMDataEase before 2.10.26 Access Control Bypass via Share TicketsEPSS 0.4%CVE-2026-102756MEDIUMDataEase bar-horizontal Axis Label Tooltip Stored Cross-Site ScriptingEPSS 0.4%CVE-2026-104142HIGHDataEase: Stored SQL Injection in group-field binning boundsEPSS 0.4%CVE-2026-102755MEDIUMDataEase Datasource/Dataset Folder Name Stored Cross-Site ScriptingEPSS 0.4%CVE-2026-104141HIGHDataEase: SQL Injection in datasource metadata identifiersEPSS 0.4%CVE-2026-33207HIGHDataEase SQL Injection VulnerabilityEPSS 0.3%CVE-2026-82878MEDIUMDataEase before 2.10.26 Missing Object-Level Authorization on Geographic, Linkage and Chart EndpointsEPSS 0.3%CVE-2026-40900HIGHDataEase has SQL Injection via Stacked QueriesEPSS 0.3%CVE-2026-53557HIGHSQLBot: Second-Order SQL Injection via Excel Datasource Leading to Remote Command ExecutionEPSS 0.3%CVE-2026-33121HIGHDataEase has SQL Injection via Datasource Save FlowEPSS 0.3%CVE-2026-33083HIGHDataEase has SQL Injection in Order By ClauseEPSS 0.3%CVE-2026-33084HIGHDataEase has SQL Injection through its getFieldEnumObj EndpointEPSS 0.3%CVE-2026-33082HIGHDataEase: SQL Injection in v2 Dataset ExportEPSS 0.3%