Vulnerabilidades en Dataease
102 resultadosAnálisis Vexday
Dataease apresenta um perfil de risco baixo com apenas 3 vulnerabilidades catalogadas e nenhuma sob exploração ativa conhecida. A fraqueza dominante (CWE-266 - Permissões Incorretas) sugere problemas de controle de acesso, mas a ausência de CVEs críticos e publicações recentes indica que o risco não está em escalation.
CVE-2026-33122HIGHDataEase has SQL Injection via Datasource ManagementEPSS 0.5%CVE-2026-50529HIGHDataEase: Link Token Leakage Prior to Share Password/Ticket ValidationEPSS 0.5%CVE-2026-33082HIGHDataEase: SQL Injection in v2 Dataset ExportEPSS 0.5%CVE-2026-33121HIGHDataEase has SQL Injection via Datasource Save FlowEPSS 0.5%CVE-2026-33083HIGHDataEase has SQL Injection in Order By ClauseEPSS 0.5%CVE-2026-33084HIGHDataEase has SQL Injection through its getFieldEnumObj EndpointEPSS 0.5%CVE-2026-53555MEDIUMStored XSS via SVG UploadEPSS 0.5%CVE-2026-53556MEDIUMSQLBot: Authenticated SQL Injection in previewData Resulting in Arbitrary File ReadEPSS 0.5%CVE-2026-32949HIGHSQLBot: SSRF to Arbitrary File Read (AFR) via Rogue MySQLEPSS 0.5%CVE-2026-55647MEDIUMDataEase: authenticated stored XSS in the dashboard text componentsEPSS 0.5%CVE-2026-50030HIGHDataEase: Arbitrary SQL execution in preview path (direct data disclosure)EPSS 0.5%CVE-2026-45320HIGHDataEase Data Dashboard SqlVariable transFilter Unfiltered SQL InjectionEPSS 0.5%CVE-2026-49867MEDIUMDataEase: Authenticated Stored XSS in DataEase Template Static ResourcesEPSS 0.5%CVE-2023-28435MEDIUMDataease file upload interface does not verify permission or file typeEPSS 0.5%CVE-2025-69285HIGHSQLBot uploadExcel Endpoint has Unauthenticated Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2026-55631HIGHDataEase: Path Traversal Leading to Arbitrary File Deletion via Font ManagementEPSS 0.5%CVE-2026-45419HIGHDataEase: Arbitrary File Write VulnerabilityEPSS 0.5%CVE-2026-45533HIGHDataEase: Path Traversal VulnerabilityEPSS 0.5%CVE-2025-27103HIGHDataease Mysql JDBC Connection Parameters Not Being Verified Leads to Arbitrary File Read VulnerabilityEPSS 0.4%CVE-2026-57172HIGHDataEase: Hardcoded JWT Signing Secret in ShareLinkEPSS 0.4%