Vulnerabilidades en Dataease
92 resultadosAnálisis Vexday
Dataease apresenta um perfil de risco baixo com apenas 3 vulnerabilidades catalogadas e nenhuma sob exploração ativa conhecida. A fraqueza dominante (CWE-266 - Permissões Incorretas) sugere problemas de controle de acesso, mas a ausência de CVEs críticos e publicações recentes indica que o risco não está em escalation.
CVE-2026-49867MEDIUMDataEase: Authenticated Stored XSS in DataEase Template Static ResourcesEPSS 0.3%CVE-2026-55635HIGHDataEase: Authenticated SQL Injection in Chart Quota FiltersEPSS 0.3%CVE-2025-62421MEDIUMDataEase vulnerable to stored cross-site scripting via file upload bypassEPSS 0.3%CVE-2026-42463HIGHSQLBot: Unauthorized Access VulnerabilityEPSS 0.2%CVE-2026-45535HIGHDataEase: Stored SQL Injection VulnerabilityEPSS 0.2%CVE-2026-50530HIGHDataEase: Token with Overly Broad Privileges in Share Mode: Access to Unshared DatasetsEPSS 0.2%CVE-2026-53730HIGHDataEase: Unauthorized Access to Engine Database via previewSql EndpointEPSS 0.2%CVE-2026-45417HIGHDataEase: SQL injection vulnerabilityEPSS 0.2%CVE-2026-5417MEDIUMDataease SQLbot Elasticsearch es_engine.py get_es_data_by_http server-side request forgeryEPSS 0.2%CVE-2026-32139MEDIUMDataease: Unfiltered active SVG content leads to Stored XSSEPSS 0.2%CVE-2026-46684CRITICALDataEase: Unauthorized Command Execution VulnerabilityEPSS 0.2%CVE-2025-15598MEDIUMDataease SQLBot JWT Token auth.py validateEmbedded signature verificationEPSS 0.2%