Browse CVEs

CRITICAL 9.8 CVE-2025-49003 DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.11, a threat actor may take advantage of a featur… Dataease 2.10.11+ Fix from $2,3002025-06-26 CRITICAL 9.8 CVE-2025-49001EPSS 22% DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.10, secret verification does not take effect succ… Dataease after 2.10.10 Fix from $2,3002025-06-03 CRITICAL 9.8 CVE-2025-49002EPSS 45% DataEase is an open source business intelligence and data visualization tool. Versions prior to version 2.10.10 have a flaw in the patch for CVE-2025… Dataease 2.10.10+ Fix from $2,3002025-06-03 HIGH 8.8 CVE-2025-48999EPSS 8% DataEase is an open source business intelligence and data visualization tool. A bypass of CVE-2025-46566's patch exists in versions prior to 2.10.10.… Dataease 2.10.10+ Fix from $1,9502025-06-03 HIGH 8.8 CVE-2025-48998 DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.6, a bypass of the patch for CVE-2025-27103 allow… Dataease 2.10.6+ Fix from $1,9502025-06-03 CRITICAL 9.8 CVE-2025-46566 DataEase is an open-source BI tool alternative to Tableau. Prior to version 2.10.9, authenticated users can complete RCE through the backend JDBC lin… Dataease 2.10.9+ Fix from $2,3002025-05-01 CRITICAL 9.8 CVE-2025-32966 DataEase is an open-source BI tool alternative to Tableau. Prior to version 2.10.8, authenticated users can complete RCE through the backend JDBC lin… Dataease 2.10.8+ Fix from $2,3002025-04-23 CRITICAL 9.8 CVE-2025-27138 DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.6, there is a flaw in the authentication in the i… Dataease 2.10.6+ Fix from $2,3002025-03-13 MEDIUM 6.5 CVE-2025-24974 DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.6, authenticated users can read and deserialize a… Dataease 2.10.6+ Fix from $1,6002025-03-13 MEDIUM 6.5 CVE-2025-27103 DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.6, a bypass for the patch for CVE-2024-55953 allo… Dataease 2.10.6+ Fix from $1,6002025-03-13 CRITICAL 9.8 CVE-2024-57707 An issue in DataEase v1 allows an attacker to execute arbitrary code via the user account and password components. Dataease No fix yet Fix from $2,3002025-02-07 CRITICAL 9.8 CVE-2024-56511EPSS 44% DataEase is an open source data visualization analysis tool. Prior to 2.10.4, there is a flaw in the authentication in the io.dataease.auth.filter.To… Dataease 2.10.4+ Fix from $2,3002025-01-10 HIGH 8.1 CVE-2024-55953 DataEase is an open source business analytics tool. Authenticated users can read and deserialize arbitrary files through the background JDBC connecti… Dataease 1.18.27+ Fix from $1,9502024-12-18 HIGH 8.8 CVE-2024-55952 DataEase is an open source business analytics tool. Authenticated users can remotely execute code through the backend JDBC connection. When construct… Dataease 1.18.27+ Fix from $1,9502024-12-18 CRITICAL 9.8 CVE-2024-52295 DataEase is an open source data visualization analysis tool. Prior to 2.10.2, DataEase allows attackers to forge jwt and take over services. The JWT … Dataease 2.10.2+ Fix from $2,3002024-11-13 CRITICAL 9.1 CVE-2024-47073 DataEase is an open source data visualization analysis tool that helps users quickly analyze data and gain insights into business trends. In affected… Dataease 2.10.2+ Fix from $2,3002024-11-07 CRITICAL 9.8 CVE-2024-47074 DataEase is an open source data visualization analysis tool. In Dataease, the PostgreSQL data source in the data source function can customize the JD… Dataease 1.18.25+ Fix from $2,3002024-10-11 CRITICAL 9.8 CVE-2024-46997 DataEase is an open source data visualization analysis tool. Prior to version 2.10.1, an attacker can achieve remote command execution by adding a ca… Dataease 2.10.1+ Fix from $2,3002024-09-23 HIGH 7.5 CVE-2024-46985 DataEase is an open source data visualization analysis tool. Prior to version 2.10.1, there is an XML external entity injection vulnerability in the … Dataease 2.10.1+ Fix from $1,9502024-09-23 HIGH 7.5 CVE-2024-31441 DataEase is an open source data visualization analysis tool. Due to the lack of restrictions on the connection parameters for the ClickHouse data sou… Dataease 1.18.19+ Fix from $1,9502024-05-14 MEDIUM 5.3 CVE-2024-30269EPSS 16% DataEase, an open source data visualization and analysis tool, has a database configuration information exposure vulnerability prior to version 2.5.0… Dataease 2.5.0+ Fix from $1,6002024-04-08 CRITICAL 9.1 CVE-2024-23328 Dataease is an open source data visualization analysis tool. A deserialization vulnerability exists in the DataEase datasource, which can be exploite… Dataease 1.18.15 / 2.3.0+ Fix from $2,3002024-02-29 MEDIUM 5.3 CVE-2023-40183 DataEase is an open source data visualization and analysis tool. Prior to version 1.18.11, DataEase has a vulnerability that allows an attacker to to… Dataease 1.18.11+ Fix from $1,6002023-09-21 HIGH 7.5 CVE-2023-40771 SQL injection vulnerability in DataEase v.1.18.9 allows a remote attacker to obtain sensitive information via a crafted string outside of the blackli… Dataease No fix yet Fix from $1,9502023-09-01 CRITICAL 9.8 CVE-2023-37258 DataEase is an open source data visualization analysis tool. Prior to version 1.18.9, DataEase has a SQL injection vulnerability that can bypass blac… Dataease 1.18.9+ Fix from $2,3002023-07-25 MEDIUM 5.4 CVE-2023-37257 DataEase is an open source data visualization analysis tool. Prior to version 1.18.9, the DataEase panel and dataset have a stored cross-site scripti… Dataease 1.18.9+ Fix from $1,6002023-07-25 MEDIUM 6.5 CVE-2023-35164 DataEase is an open source data visualization analysis tool to analyze data and gain insight into business trends. In affected versions a missing aut… Dataease 1.18.8+ Fix from $1,6002023-06-26 HIGH 8.1 CVE-2023-34463 DataEase is an open source data visualization analysis tool to analyze data and gain insight into business trends. In affected versions Unauthorized … Dataease 1.18.8+ Fix from $1,9502023-06-26 MEDIUM 6.5 CVE-2023-35168 DataEase is an open source data visualization analysis tool to analyze data and gain insight into business trends. Affected versions of DataEase has … Dataease 1.18.8+ Fix from $1,6002023-06-26 CRITICAL 9.8 CVE-2023-33963 DataEase is an open source data visualization and analysis tool. Prior to version 1.18.7, a deserialization vulnerability exists in the DataEase data… Dataease 1.18.7+ Fix from $2,3002023-06-01