Vulnerabilidades en Dataease

102 resultados
Análisis Vexday

Dataease apresenta um perfil de risco baixo com apenas 3 vulnerabilidades catalogadas e nenhuma sob exploração ativa conhecida. A fraqueza dominante (CWE-266 - Permissões Incorretas) sugere problemas de controle de acesso, mas a ausência de CVEs críticos e publicações recentes indica que o risco não está em escalation.

CVE-2023-35164MEDIUMUnauthorized users can manipulate a dashboard created by an administrator in DataEaseEPSS 0.4%CVE-2023-37257MEDIUMThe DataEase panel and dataset have a stored XSS vulnerabilityEPSS 0.4%CVE-2025-62419HIGHDataEase vulnerable to JDBC URL injection in DB2 and MongoDB data source configurationEPSS 0.4%CVE-2026-93660HIGHSQLBot through 1.10.1 Improper Access Control via Dashboard UpdateEPSS 0.4%CVE-2026-40899HIGHDataEase has an Arbitrary File Read VulnerabilityEPSS 0.4%CVE-2026-53554HIGHSQLBot: Arbitrary File Write via parseExcel Leading to Code Execution Through Alembic Import ProcessingEPSS 0.4%CVE-2026-50530HIGHDataEase: Token with Overly Broad Privileges in Share Mode: Access to Unshared DatasetsEPSS 0.4%CVE-2026-55635HIGHDataEase: Authenticated SQL Injection in Chart Quota FiltersEPSS 0.4%CVE-2025-24974HIGHDataEase Mysql JDBC Connection Parameters Not Being Verified Leads to Arbitrary File Read VulnerabilityEPSS 0.4%CVE-2026-45417HIGHDataEase: SQL injection vulnerabilityEPSS 0.4%CVE-2026-45535HIGHDataEase: Stored SQL Injection VulnerabilityEPSS 0.4%CVE-2026-5417MEDIUMDataease SQLbot Elasticsearch es_engine.py get_es_data_by_http server-side request forgeryEPSS 0.4%CVE-2026-53730HIGHDataEase: Unauthorized Access to Engine Database via previewSql EndpointEPSS 0.4%CVE-2026-42463HIGHSQLBot: Unauthorized Access VulnerabilityEPSS 0.4%CVE-2026-82879MEDIUMDataEase before 2.10.26 Access Control Bypass via Share TicketsEPSS 0.4%CVE-2026-82878MEDIUMDataEase before 2.10.26 Missing Object-Level Authorization on Geographic, Linkage and Chart EndpointsEPSS 0.3%CVE-2026-53557HIGHSQLBot: Second-Order SQL Injection via Excel Datasource Leading to Remote Command ExecutionEPSS 0.3%CVE-2026-46684CRITICALDataEase: Unauthorized Command Execution VulnerabilityEPSS 0.3%CVE-2026-72743MEDIUMSQLBot 1.10.0 SQText Dashboard Component Stored XSS via v-htmlEPSS 0.3%CVE-2026-32139MEDIUMDataease: Unfiltered active SVG content leads to Stored XSSEPSS 0.3%