Vulnerabilidades em DataEase

102 resultados
Análise Vexday

DataEase apresenta perfil de risco baixo com apenas 1 vulnerabilidade registrada, publicada recentemente (últimos 90 dias) e sem evidências de exploração ativa. A fraqueza identificada (CWE-23, relacionada a validação de caminho) não atinge severidade crítica, indicando exposição limitada no ecossistema de fornecedores monitorados.

CVE-2025-62420HIGHDataEase vulnerable to remote code execution via H2 JDBC driver bypassEPSS 1.0%CVE-2025-49003HIGHDataease H2 JDBC Connection Remote Code ExecutionEPSS 0.9%CVE-2023-28437CRITICALSQL injection vulnerability due to the keyword blacklist for defending against SQL injection will be bypassedEPSS 0.9%CVE-2026-32950HIGHSQLBot: RCE via SQL Injection in Excel Upload EndpointEPSS 0.9%CVE-2024-55952HIGHDataease Redshift Data Source JDBC Connection Parameters Not Verified Leads to RCE VulnerabilityEPSS 0.9%CVE-2024-52295CRITICALDataEase has a forged JWT token vulnerabilityEPSS 0.9%CVE-2025-58748HIGHDataease H2 data source JDBC URL validation bypass leads to remote code executionEPSS 0.8%CVE-2026-55633HIGHDataEase H2 RCE via Zip Protocol & File Dropper Fix bypassEPSS 0.8%CVE-2023-34463HIGHUnauthorized users can delete applications in DataEaseEPSS 0.7%CVE-2025-46566MEDIUMDataease redshift JDBC Connection Remote Code ExecutionEPSS 0.7%CVE-2023-35168MEDIUMDataEase has a privilege bypass vulnerabilityEPSS 0.7%CVE-2026-32140CRITICALDataease: Redshift JDBC RCE BypassEPSS 0.7%CVE-2025-58045HIGHDataease server-side request forgery via unfiltered DB2 JDBC ldap parameterEPSS 0.7%CVE-2024-46985HIGHDataEase has an XXE vulnerabilityEPSS 0.7%CVE-2026-53729HIGHDataEase ExportCenter IDOR allows cross-user export task accessEPSS 0.6%CVE-2026-45534CRITICALDataEase: RCE VulnerabilityEPSS 0.6%CVE-2023-40183HIGHDataEase has a vulnerability to obtain user cookiesEPSS 0.6%CVE-2026-40901HIGHDataEase: Quartz Deserialization → Remote Code ExecutionEPSS 0.6%CVE-2026-33324CRITICALSQLBot prompt injection allows arbitrary SQL execution and remote code executionEPSS 0.6%CVE-2026-53751HIGHDataEase: H2 JDBC URL Filter Bypass Leads to Remote Code Execution (RCE)EPSS 0.6%