Vulnerability index

Browse CVEs

72 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Dataease CRITICAL 9.8
CVE-2025-49003

DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.11, a threat actor may take advantage of a featur…

Fix: 2.10.11+
Fix from $2,300 2025-06-26
Dataease CRITICAL 9.8
CVE-2025-49001EPSS 22%

DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.10, secret verification does not take effect succ…

Fix: after 2.10.10
Fix from $2,300 2025-06-03
Dataease CRITICAL 9.8
CVE-2025-49002EPSS 45%

DataEase is an open source business intelligence and data visualization tool. Versions prior to version 2.10.10 have a flaw in the patch for CVE-2025…

Fix: 2.10.10+
Fix from $2,300 2025-06-03
Dataease HIGH 8.8
CVE-2025-48999EPSS 8%

DataEase is an open source business intelligence and data visualization tool. A bypass of CVE-2025-46566's patch exists in versions prior to 2.10.10.…

Fix: 2.10.10+
Fix from $1,950 2025-06-03
Dataease HIGH 8.8
CVE-2025-48998

DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.6, a bypass of the patch for CVE-2025-27103 allow…

Fix: 2.10.6+
Fix from $1,950 2025-06-03
Dataease CRITICAL 9.8
CVE-2025-46566

DataEase is an open-source BI tool alternative to Tableau. Prior to version 2.10.9, authenticated users can complete RCE through the backend JDBC lin…

Fix: 2.10.9+
Fix from $2,300 2025-05-01
Dataease CRITICAL 9.8
CVE-2025-32966

DataEase is an open-source BI tool alternative to Tableau. Prior to version 2.10.8, authenticated users can complete RCE through the backend JDBC lin…

Fix: 2.10.8+
Fix from $2,300 2025-04-23
Dataease CRITICAL 9.8
CVE-2025-27138

DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.6, there is a flaw in the authentication in the i…

Fix: 2.10.6+
Fix from $2,300 2025-03-13
Dataease MEDIUM 6.5
CVE-2025-24974

DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.6, authenticated users can read and deserialize a…

Fix: 2.10.6+
Fix from $1,600 2025-03-13
Dataease MEDIUM 6.5
CVE-2025-27103

DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.6, a bypass for the patch for CVE-2024-55953 allo…

Fix: 2.10.6+
Fix from $1,600 2025-03-13
Dataease CRITICAL 9.8
CVE-2024-57707

An issue in DataEase v1 allows an attacker to execute arbitrary code via the user account and password components.

No fix yet
Fix from $2,300 2025-02-07
Dataease CRITICAL 9.8
CVE-2024-56511EPSS 44%

DataEase is an open source data visualization analysis tool. Prior to 2.10.4, there is a flaw in the authentication in the io.dataease.auth.filter.To…

Fix: 2.10.4+
Fix from $2,300 2025-01-10
Dataease HIGH 8.1
CVE-2024-55953

DataEase is an open source business analytics tool. Authenticated users can read and deserialize arbitrary files through the background JDBC connecti…

Fix: 1.18.27+
Fix from $1,950 2024-12-18
Dataease HIGH 8.8
CVE-2024-55952

DataEase is an open source business analytics tool. Authenticated users can remotely execute code through the backend JDBC connection. When construct…

Fix: 1.18.27+
Fix from $1,950 2024-12-18
Dataease CRITICAL 9.8
CVE-2024-52295

DataEase is an open source data visualization analysis tool. Prior to 2.10.2, DataEase allows attackers to forge jwt and take over services. The JWT …

Fix: 2.10.2+
Fix from $2,300 2024-11-13
Dataease CRITICAL 9.1
CVE-2024-47073

DataEase is an open source data visualization analysis tool that helps users quickly analyze data and gain insights into business trends. In affected…

Fix: 2.10.2+
Fix from $2,300 2024-11-07
Dataease CRITICAL 9.8
CVE-2024-47074

DataEase is an open source data visualization analysis tool. In Dataease, the PostgreSQL data source in the data source function can customize the JD…

Fix: 1.18.25+
Fix from $2,300 2024-10-11
Dataease CRITICAL 9.8
CVE-2024-46997

DataEase is an open source data visualization analysis tool. Prior to version 2.10.1, an attacker can achieve remote command execution by adding a ca…

Fix: 2.10.1+
Fix from $2,300 2024-09-23
Dataease HIGH 7.5
CVE-2024-46985

DataEase is an open source data visualization analysis tool. Prior to version 2.10.1, there is an XML external entity injection vulnerability in the …

Fix: 2.10.1+
Fix from $1,950 2024-09-23
Dataease HIGH 7.5
CVE-2024-31441

DataEase is an open source data visualization analysis tool. Due to the lack of restrictions on the connection parameters for the ClickHouse data sou…

Fix: 1.18.19+
Fix from $1,950 2024-05-14
Dataease MEDIUM 5.3
CVE-2024-30269EPSS 16%

DataEase, an open source data visualization and analysis tool, has a database configuration information exposure vulnerability prior to version 2.5.0…

Fix: 2.5.0+
Fix from $1,600 2024-04-08
Dataease CRITICAL 9.1
CVE-2024-23328

Dataease is an open source data visualization analysis tool. A deserialization vulnerability exists in the DataEase datasource, which can be exploite…

Fix: 1.18.15 / 2.3.0+
Fix from $2,300 2024-02-29
Dataease MEDIUM 5.3
CVE-2023-40183

DataEase is an open source data visualization and analysis tool. Prior to version 1.18.11, DataEase has a vulnerability that allows an attacker to to…

Fix: 1.18.11+
Fix from $1,600 2023-09-21
Dataease HIGH 7.5
CVE-2023-40771

SQL injection vulnerability in DataEase v.1.18.9 allows a remote attacker to obtain sensitive information via a crafted string outside of the blackli…

No fix yet
Fix from $1,950 2023-09-01
Dataease CRITICAL 9.8
CVE-2023-37258

DataEase is an open source data visualization analysis tool. Prior to version 1.18.9, DataEase has a SQL injection vulnerability that can bypass blac…

Fix: 1.18.9+
Fix from $2,300 2023-07-25
Dataease MEDIUM 5.4
CVE-2023-37257

DataEase is an open source data visualization analysis tool. Prior to version 1.18.9, the DataEase panel and dataset have a stored cross-site scripti…

Fix: 1.18.9+
Fix from $1,600 2023-07-25
Dataease MEDIUM 6.5
CVE-2023-35164

DataEase is an open source data visualization analysis tool to analyze data and gain insight into business trends. In affected versions a missing aut…

Fix: 1.18.8+
Fix from $1,600 2023-06-26
Dataease HIGH 8.1
CVE-2023-34463

DataEase is an open source data visualization analysis tool to analyze data and gain insight into business trends. In affected versions Unauthorized …

Fix: 1.18.8+
Fix from $1,950 2023-06-26
Dataease MEDIUM 6.5
CVE-2023-35168

DataEase is an open source data visualization analysis tool to analyze data and gain insight into business trends. Affected versions of DataEase has …

Fix: 1.18.8+
Fix from $1,600 2023-06-26
Dataease CRITICAL 9.8
CVE-2023-33963

DataEase is an open source data visualization and analysis tool. Prior to version 1.18.7, a deserialization vulnerability exists in the DataEase data…

Fix: 1.18.7+
Fix from $2,300 2023-06-01