Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

dataease — Vulnerabilities & Security Advisories 89

All 89 CVE vulnerabilities found in dataease, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities affecting DataEase, an open-source data analysis and business intelligence platform. It collects reported flaws across the software's version history, covering the period since the product's initial release through the most recent disclosed advisories. Readers can track the vendor's security posture, analyze specific weakness categories such as injection flaws or memory corruption issues, and review the complete vulnerability timeline for this product. The aggregation serves as a reference point for security teams managing DataEase deployments, allowing them to identify patterns in historical disclosures and assess the evolution of known risks without searching individual advisory databases.

Vendor: dataease

CVE ID Title CVSS Severity Published
CVE-2026-33122 DataEase has SQL Injection via Datasource Management CWE-89 8.8AI High AI 2026-04-16
CVE-2026-33121 DataEase has SQL Injection via Datasource Save Flow CWE-89 8.1AI High AI 2026-04-16
CVE-2026-33084 DataEase has SQL Injection through its getFieldEnumObj Endpoint CWE-89 7.5AI High AI 2026-04-16
CVE-2026-33083 DataEase has SQL Injection in Order By Clause CWE-89 8.8AI High AI 2026-04-16
CVE-2026-33082 DataEase: SQL Injection in v2 Dataset Export CWE-89 9.8AI Critical AI 2026-04-16
CVE-2026-32939 DataEase is Vulnerable to H2 JDBC RCE Bypass CWE-178 9.1 - 2026-03-20
CVE-2026-32140 Dataease: Redshift JDBC RCE Bypass CWE-22 8.0AI High AI 2026-03-12
CVE-2026-32139 Dataease: Unfiltered active SVG content leads to Stored XSS CWE-79 5.4AI Medium AI 2026-03-12
CVE-2026-32137 DataEase SQL Injection Vulnerability CWE-89 9.8AI Critical AI 2026-03-12
CVE-2026-23958 DataEase Vulnerable to Brute-Force Attack on Admin JWT Secret Derived from Password that Enables Full Account Takeover CWE-522 9.8AI Critical AI 2026-01-22
CVE-2025-64428 DataEase DB2 JNDI Vulnerability CWE-74 9.1 - 2025-11-20
CVE-2025-64164 DataEase is vulnerable to Oracle JNDI Injection CWE-502 8.1 - 2025-11-06
CVE-2025-64163 DataEase's DB2 is vulnerable to SSRF CWE-918 10.0 - 2025-11-05
CVE-2025-62419 DataEase vulnerable to JDBC URL injection in DB2 and MongoDB data source configuration CWE-502 9.8AI Critical AI 2025-10-17
CVE-2025-62420 DataEase vulnerable to remote code execution via H2 JDBC driver bypass CWE-502 8.1AI High AI 2025-10-17
CVE-2025-62421 DataEase vulnerable to stored cross-site scripting via file upload bypass CWE-79 5.4AI Medium AI 2025-10-17
CVE-2025-62422 DataEase SQL injection vulnerability CWE-89 9.8AI Critical AI 2025-10-17
CVE-2025-58748 Dataease H2 data source JDBC URL validation bypass leads to remote code execution CWE-502 9.8AI Critical AI 2025-09-15
CVE-2025-58046 Dataease has a JDBC attack vulnerability in the Impala datasource CWE-502 9.8AI Critical AI 2025-09-15
CVE-2025-58045 Dataease server-side request forgery via unfiltered DB2 JDBC ldap parameter CWE-918 9.8AI Critical AI 2025-09-15
CVE-2025-57772 Dataease H2 JDBC RCE Bypass CWE-94 9.1AI Critical AI 2025-08-25
CVE-2025-57773 Dataease DB2 Aspectweaver Deserialization Arbitrary File Write Vulnerability CWE-502 8.8AI High AI 2025-08-25
CVE-2025-53006 Dataease PostgreSQL & Redshift Data Source JDBC Connection Parameters Bypass Vulnerability CWE-153 9.1AI Critical AI 2025-07-02
CVE-2025-53005 Dataease PostgreSQL Data Source JDBC Connection Parameters Bypass Vulnerability CWE-153 8.8AI High AI 2025-07-01
CVE-2025-53004 Dataease Redshift Data Source JDBC Connection Parameters Bypass Vulnerability CWE-153 8.8AI High AI 2025-06-30
CVE-2025-49003 Dataease H2 JDBC Connection Remote Code Execution CWE-153 9.8AI Critical AI 2025-06-26
CVE-2025-49002 Dataease H2 Database Remote Code Execution (RCE) Bypass Vulnerability CWE-290 8.2AI High AI 2025-06-03
CVE-2025-49001 Dataease Authentication Bypass Vulnerability CWE-287 5.3AI Medium AI 2025-06-03
CVE-2025-48999 Dataease Redshift Data Source JDBC Connection Parameters Not Verified Leads to RCE Vulnerability CWE-923 7.5AI High AI 2025-06-03
CVE-2025-48998 Dataease MYSQL JDBC File Reading Vulnerability CWE-89 8.8AI High AI 2025-06-03

All 89 known CVE vulnerabilities affecting dataease with full Chinese analysis, references, and POCs where available.