Vulnerabilidades em DataEase

102 resultados
Análise Vexday

DataEase apresenta perfil de risco baixo com apenas 1 vulnerabilidade registrada, publicada recentemente (últimos 90 dias) e sem evidências de exploração ativa. A fraqueza identificada (CWE-23, relacionada a validação de caminho) não atinge severidade crítica, indicando exposição limitada no ecossistema de fornecedores monitorados.

CVE-2026-45417HIGHDataEase: SQL injection vulnerabilityEPSS 0.4%CVE-2026-45535HIGHDataEase: Stored SQL Injection VulnerabilityEPSS 0.4%CVE-2026-53730HIGHDataEase: Unauthorized Access to Engine Database via previewSql EndpointEPSS 0.4%CVE-2026-53555MEDIUMStored XSS via SVG UploadEPSS 0.4%CVE-2026-53554HIGHSQLBot: Arbitrary File Write via parseExcel Leading to Code Execution Through Alembic Import ProcessingEPSS 0.4%CVE-2026-33207HIGHDataEase SQL Injection VulnerabilityEPSS 0.3%CVE-2026-40900HIGHDataEase has SQL Injection via Stacked QueriesEPSS 0.3%CVE-2026-33084HIGHDataEase has SQL Injection through its getFieldEnumObj EndpointEPSS 0.3%CVE-2026-33083HIGHDataEase has SQL Injection in Order By ClauseEPSS 0.3%CVE-2026-33121HIGHDataEase has SQL Injection via Datasource Save FlowEPSS 0.3%CVE-2026-33082HIGHDataEase: SQL Injection in v2 Dataset ExportEPSS 0.3%CVE-2026-46684CRITICALDataEase: Unauthorized Command Execution VulnerabilityEPSS 0.3%CVE-2025-62421MEDIUMDataEase vulnerable to stored cross-site scripting via file upload bypassEPSS 0.3%CVE-2026-53557HIGHSQLBot: Second-Order SQL Injection via Excel Datasource Leading to Remote Command ExecutionEPSS 0.3%CVE-2026-42463HIGHSQLBot: Unauthorized Access VulnerabilityEPSS 0.2%CVE-2026-93660HIGHSQLBot through 1.10.1 Improper Access Control via Dashboard UpdateEPSS 0.2%CVE-2026-82879MEDIUMDataEase before 2.10.26 Access Control Bypass via Share TicketsEPSS 0.2%CVE-2026-5417MEDIUMDataease SQLbot Elasticsearch es_engine.py get_es_data_by_http server-side request forgeryEPSS 0.2%CVE-2026-32139MEDIUMDataease: Unfiltered active SVG content leads to Stored XSSEPSS 0.2%CVE-2026-82878MEDIUMDataEase before 2.10.26 Missing Object-Level Authorization on Geographic, Linkage and Chart EndpointsEPSS 0.2%