CVE Tools
Track your stack

Dataease

54 CVEs tracked since 2022. Since Jul 2022, none of them reached CISA KEV.

Dataease CVEs per month

Jul 2022 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Dataease CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2022-0740
2022-083 or fewer
2022-093 or fewer
2022-102 or fewer
2022-113 or fewer
2022-123 or fewer
2023-013 or fewer
2023-023 or fewer
2023-03no snapshot
2023-043 or fewer
2023-053 or fewer
2023-0650
2023-073 or fewer
2023-084 or fewer
2023-093 or fewer
2023-104 or fewer
2023-114 or fewer
2023-124 or fewer
2024-014 or fewer
2024-024 or fewer
2024-034 or fewer
2024-044 or fewer
2024-055 or fewer
2024-064 or fewer
2024-074 or fewer
2024-084 or fewer
2024-093 or fewer
2024-104 or fewer
2024-114 or fewer
2024-123 or fewer
2025-014 or fewer
2025-023 or fewer
2025-035 or fewer
2025-044 or fewer
2025-054 or fewer
2025-0660
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-0390
2026-04100
2026-057 or fewer
2026-067 or fewer
2026-07200
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in Dataease's monthly top three, with their CVEs summed over those months.

  1. Dataease486 months
  2. Sqlbot62 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Dataease.

  1. CVE-2026-102755DataEase Datasource/Dataset Folder Name Stored Cross-Site Scripting—
  2. CVE-2026-102756DataEase bar-horizontal Axis Label Tooltip Stored Cross-Site Scripting—
  3. CVE-2026-104143DataEase: Stored SQL Injection via dateFormat field templates—
  4. CVE-2026-104142DataEase: Stored SQL Injection in group-field binning bounds—
  5. CVE-2026-104141DataEase: SQL Injection in datasource metadata identifiers—
  6. CVE-2026-93660SQLBot through 1.10.1 Improper Access Control via Dashboard Update6.5
  7. CVE-2026-53557SQLBot: Second-Order SQL Injection via Excel Datasource Leading to Remote Command Execution—
  8. CVE-2026-53555Stored XSS via SVG Upload—
  9. CVE-2026-53556SQLBot: Authenticated SQL Injection in previewData Resulting in Arbitrary File Read—
  10. CVE-2026-53554SQLBot: Arbitrary File Write via parseExcel Leading to Code Execution Through Alembic Import Processing—
  11. CVE-2023-40772A directory Traversal vulnerability in DataEase before 1.18.10 allows a remote attacker to obtain sensitive information via a a crafted request to the StaticResourceController.java component.4.3
  12. CVE-2026-82879DataEase before 2.10.26 Access Control Bypass via Share Tickets6.3
  13. CVE-2026-82878DataEase before 2.10.26 Missing Object-Level Authorization on Geographic, Linkage and Chart Endpoints6.3
  14. CVE-2026-45532DataEase has a Path Traversal Vulnerability—
  15. CVE-2026-72743SQLBot 1.10.0 SQText Dashboard Component Stored XSS via v-html5.4

The record

Peak rank
#57 in Jul 2026
Busiest month shown
Jul 2026, 20 CVEs
Months with a KEV entry
0 since Jul 2022
Monthly snapshots
6 since 2022
Dataease's full record, month by month