Browse CVEs

HIGH 7.2 CVE-2026-8724 A security flaw has been discovered in Dataease 2.10.20. Impacted is the function SqlparserUtils.transFilter of the file SqlparserUtils.java of the c… Dataease No fix yet Fix from $1,9502026-05-17 HIGH 8.8 CVE-2026-40900 DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below contain a SQL injection vulnerability in the /de2api… Dataease 2.10.21+ Fix from $1,9502026-04-16 HIGH 8.8 CVE-2026-40901 DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below ship the legacy velocity-1.7.jar, which pulls in com… Dataease 2.10.21+ Fix from $1,9502026-04-16 CRITICAL 9.8 CVE-2026-33122 DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below contain a SQL injection vulnerability in the API dat… Dataease 2.10.21+ Fix from $2,3002026-04-16 HIGH 8.8 CVE-2026-33207 DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below contain a SQL injection vulnerability in the /dataso… Dataease 2.10.21+ Fix from $1,9502026-04-16 MEDIUM 6.5 CVE-2026-40899 DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below contain a JDBC parameter blocklist bypass vulnerabil… Dataease 2.10.21+ Fix from $1,6002026-04-16 HIGH 8.8 CVE-2026-33084 DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below contain a SQL injection vulnerability in the sort pa… Dataease 2.10.21+ Fix from $1,9502026-04-16 HIGH 8.8 CVE-2026-33121 DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below contain a SQL injection vulnerability in the API dat… Dataease 2.10.21+ Fix from $1,9502026-04-16 CRITICAL 9.8 CVE-2026-33082 DataEase is an open source data visualization analysis tool. Versions 2.10.20 and below contain a SQL injection vulnerability in the dataset export f… Dataease 2.10.21+ Fix from $2,3002026-04-16 HIGH 8.8 CVE-2026-33083 DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below contain a SQL injection vulnerability in the orderDi… Dataease 2.10.21+ Fix from $1,9502026-04-16 HIGH 8.1 CVE-2026-32939 DataEase is an open source data visualization analysis tool. Versions 2.10.19 and below have inconsistent Locale handling between the JDBC URL valida… Dataease 2.10.20+ Fix from $1,9502026-03-20 HIGH 8.8 CVE-2026-32137 Dataease is an open source data visualization analysis tool. Prior to 2.10.20, The table parameter for /de2api/datasource/previewData is directly con… Dataease 2.10.20+ Fix from $1,9502026-03-12 HIGH 8.8 CVE-2026-32140 Dataease is an open source data visualization analysis tool. Prior to 2.10.20, By controlling the IniFile parameter, an attacker can force the JDBC d… Dataease 2.10.20+ Fix from $1,9502026-03-12 MEDIUM 5.4 CVE-2026-32139 Dataease is an open source data visualization analysis tool. In DataEase 2.10.19 and earlier, the static resource upload interface allows SVG uploads… Dataease 2.10.20+ Fix from $1,6002026-03-12 CRITICAL 9.8 CVE-2026-23958 Dataease is an open source data visualization analysis tool. Prior to version 2.10.19, DataEase uses the MD5 hash of the user’s password as the JWT s… Dataease 2.10.19+ Fix from $2,3002026-01-22 CRITICAL 9.8 CVE-2025-64428 Dataease is an open source data visualization analysis tool. Versions prior to 2.10.17 are vulnerable to JNDI injection. A blacklist was added in the… Dataease 2.10.17+ Fix from $2,3002025-11-20 CRITICAL 9.8 CVE-2025-64164 Dataease is an open source data visualization analysis tool. In versions 2.10.14 and below, DataEase did not properly filter when establishing JDBC c… Dataease 2.10.15+ Fix from $2,3002025-11-06 CRITICAL 9.8 CVE-2025-64163 DataEase is an open source data visualization analysis tool. In versions 2.10.14 and below, the vendor added a blacklist to filter ldap:// and ldaps:… Dataease 2.10.15+ Fix from $2,3002025-11-06 HIGH 8.8 CVE-2025-62420 DataEase is a data visualization and analytics platform. In DataEase versions through 2.10.13, a JDBC driver bypass vulnerability exists in the H2 da… Dataease 2.10.14+ Fix from $1,9502025-10-17 HIGH 8.8 CVE-2025-62422 DataEase is an open source data visualization and analytics platform. In versions 2.10.13 and earlier, the /de2api/datasetData/tableField interface i… Dataease 2.10.14+ Fix from $1,9502025-10-17 HIGH 7.5 CVE-2025-62419 DataEase is a data visualization and analytics platform. In DataEase versions through 2.10.13, a JDBC URL injection vulnerability exists in the DB2 a… Dataease 2.10.14+ Fix from $1,9502025-10-17 MEDIUM 5.4 CVE-2025-62421 DataEase is a data visualization and analytics platform. In DataEase versions through 2.10.13, a stored cross-site scripting vulnerability exists due… Dataease 2.10.14+ Fix from $1,6002025-10-17 CRITICAL 9.8 CVE-2025-58748 Dataease is an open source data analytics and visualization platform. In Dataease versions up to 2.10.12 the H2 data source implementation (H2.java) … Dataease 2.10.13+ Fix from $2,3002025-09-15 CRITICAL 9.8 CVE-2025-58045 Dataease is an open source data analytics and visualization platform. In Dataease versions up to 2.10.12, the patch introduced to mitigate DB2 JDBC d… Dataease 2.10.13+ Fix from $2,3002025-09-15 CRITICAL 9.8 CVE-2025-58046 Dataease is an open-source data visualization and analysis platform. In versions up to and including 2.10.12, the Impala data source is vulnerable to… Dataease 2.10.13+ Fix from $2,3002025-09-15 CRITICAL 9.8 CVE-2025-57772EPSS 9% DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.12, there is a H2 JDBC RCE bypass in DataEase. If… Dataease 2.10.12+ Fix from $2,3002025-08-25 CRITICAL 9.8 CVE-2025-57773EPSS 8% DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.12, because DB2 parameters are not filtered, a JN… Dataease 2.10.12+ Fix from $2,3002025-08-25 CRITICAL 9.8 CVE-2025-53006 DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.11, in both PostgreSQL and Redshift, apart from p… Dataease 2.10.11+ Fix from $2,3002025-07-02 CRITICAL 9.8 CVE-2025-53005 DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.11, there is a bypass vulnerability in Dataease's… Dataease 2.10.11+ Fix from $2,3002025-07-01 CRITICAL 9.8 CVE-2025-53004 DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.11, there is a bypass vulnerability in Dataease's… Dataease 2.10.11+ Fix from $2,3002025-06-30