Vulnerabilidades em Dataease

102 resultados
Análise Vexday

Dataease apresenta um perfil de risco baixo com apenas 3 vulnerabilidades catalogadas e nenhuma sob exploração ativa conhecida. A fraqueza dominante (CWE-266 - Permissões Incorretas) sugere problemas de controle de acesso, mas a ausência de CVEs críticos e publicações recentes indica que o risco não está em escalation.

CVE-2026-32939HIGHDataEase is Vulnerable to H2 JDBC RCE BypassEPSS 0.6%CVE-2026-53751HIGHDataEase: H2 JDBC URL Filter Bypass Leads to Remote Code Execution (RCE)EPSS 0.6%CVE-2025-53006HIGHDataease PostgreSQL & Redshift Data Source JDBC Connection Parameters Bypass VulnerabilityEPSS 0.6%CVE-2024-47074CRITICALDataease PostgreSQL Data Source JDBC Connection Parameters Not Verified Leads to Deserialization VulnerabilityEPSS 0.6%CVE-2025-64164HIGHDataEase is vulnerable to Oracle JNDI InjectionEPSS 0.6%CVE-2025-53005HIGHDataease PostgreSQL Data Source JDBC Connection Parameters Bypass VulnerabilityEPSS 0.6%CVE-2025-53004HIGHDataease Redshift Data Source JDBC Connection Parameters Bypass VulnerabilityEPSS 0.6%CVE-2025-64428HIGHDataEase DB2 JNDI VulnerabilityEPSS 0.6%CVE-2025-27138HIGHDataEase has an improper authentication vulnerabilityEPSS 0.6%CVE-2026-32137CRITICALDataEase SQL Injection VulnerabilityEPSS 0.6%CVE-2026-50124HIGHDataEase: Remote Code Execution (RCE) via Zip Protocol & File DropperEPSS 0.6%CVE-2024-31441HIGHArbitrary File Reading in DataEaseEPSS 0.6%CVE-2025-15597MEDIUMDataease SQLBot API Endpoint assistant.py access controlEPSS 0.5%CVE-2026-23958HIGHDataEase Vulnerable to Brute-Force Attack on Admin JWT Secret Derived from Password that Enables Full Account TakeoverEPSS 0.5%CVE-2023-25807HIGHDataEase dashboard has a stored XSS vulnerabilityEPSS 0.5%CVE-2026-33207HIGHDataEase SQL Injection VulnerabilityEPSS 0.5%CVE-2026-40900HIGHDataEase has SQL Injection via Stacked QueriesEPSS 0.5%CVE-2026-45532HIGHDataEase has a Path Traversal VulnerabilityEPSS 0.5%CVE-2025-62422HIGHDataEase SQL injection vulnerabilityEPSS 0.5%CVE-2025-48998HIGHDataease MYSQL JDBC File Reading VulnerabilityEPSS 0.5%