Vulnerabilidades em DataEase
102 resultadosAnálise Vexday
DataEase apresenta perfil de risco baixo com apenas 1 vulnerabilidade registrada, publicada recentemente (últimos 90 dias) e sem evidências de exploração ativa. A fraqueza identificada (CWE-23, relacionada a validação de caminho) não atinge severidade crítica, indicando exposição limitada no ecossistema de fornecedores monitorados.
CVE-2026-55647MEDIUMDataEase: authenticated stored XSS in the dashboard text componentsEPSS 0.5%CVE-2023-28435MEDIUMDataease file upload interface does not verify permission or file typeEPSS 0.5%CVE-2025-69285HIGHSQLBot uploadExcel Endpoint has Unauthenticated Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2026-45533HIGHDataEase: Path Traversal VulnerabilityEPSS 0.5%CVE-2026-45419HIGHDataEase: Arbitrary File Write VulnerabilityEPSS 0.5%CVE-2026-55631HIGHDataEase: Path Traversal Leading to Arbitrary File Deletion via Font ManagementEPSS 0.5%CVE-2025-27103HIGHDataease Mysql JDBC Connection Parameters Not Being Verified Leads to Arbitrary File Read VulnerabilityEPSS 0.4%CVE-2026-57172HIGHDataEase: Hardcoded JWT Signing Secret in ShareLinkEPSS 0.4%CVE-2026-32939HIGHDataEase is Vulnerable to H2 JDBC RCE BypassEPSS 0.4%CVE-2023-35164MEDIUMUnauthorized users can manipulate a dashboard created by an administrator in DataEaseEPSS 0.4%CVE-2023-37257MEDIUMThe DataEase panel and dataset have a stored XSS vulnerabilityEPSS 0.4%CVE-2025-62419HIGHDataEase vulnerable to JDBC URL injection in DB2 and MongoDB data source configurationEPSS 0.4%CVE-2026-32949HIGHSQLBot: SSRF to Arbitrary File Read (AFR) via Rogue MySQLEPSS 0.4%CVE-2026-32137CRITICALDataEase SQL Injection VulnerabilityEPSS 0.4%CVE-2026-50530HIGHDataEase: Token with Overly Broad Privileges in Share Mode: Access to Unshared DatasetsEPSS 0.4%CVE-2026-55635HIGHDataEase: Authenticated SQL Injection in Chart Quota FiltersEPSS 0.4%CVE-2026-33122HIGHDataEase has SQL Injection via Datasource ManagementEPSS 0.4%CVE-2026-40899HIGHDataEase has an Arbitrary File Read VulnerabilityEPSS 0.4%CVE-2025-24974HIGHDataEase Mysql JDBC Connection Parameters Not Being Verified Leads to Arbitrary File Read VulnerabilityEPSS 0.4%CVE-2026-53556MEDIUMSQLBot: Authenticated SQL Injection in previewData Resulting in Arbitrary File ReadEPSS 0.4%