Dataease
This hub aggregates every CVE we track for Dataease, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.
96
CVEs tracked
32
Critical
28
High
0
In CISA KEV
Severity distribution
CRITICAL32HIGH28MEDIUM15
Monthly trend
1
2
2
1
1
3
1
1
6
2
2
3
4
3
0
1
0
4
9
1
0
20
3
1
2024-102026-09
Latest CVEs
The 15 most recently published vulnerabilities affecting Dataease.
- CVE-2023-40772A directory Traversal vulnerability in DataEase before 1.18.10 allows a remote attacker to obtain sensitive information via a a crafted request to the StaticResourceController.java component.4.3
- CVE-2026-82879DataEase before 2.10.26 Access Control Bypass via Share Tickets6.3
- CVE-2026-82878DataEase before 2.10.26 Missing Object-Level Authorization on Geographic, Linkage and Chart Endpoints6.3
- CVE-2026-45532DataEase has a Path Traversal Vulnerability
- CVE-2026-49867DataEase: Authenticated Stored XSS in DataEase Template Static Resources
- CVE-2026-46684DataEase: Unauthorized Command Execution Vulnerability
- CVE-2026-45320DataEase Data Dashboard SqlVariable transFilter Unfiltered SQL Injection
- CVE-2026-45535DataEase: Stored SQL Injection Vulnerability
- CVE-2026-45533DataEase: Path Traversal Vulnerability
- CVE-2026-50124DataEase: Remote Code Execution (RCE) via Zip Protocol & File Dropper
- CVE-2026-50030DataEase: Arbitrary SQL execution in preview path (direct data disclosure)
- CVE-2026-45419DataEase: Arbitrary File Write Vulnerability
- CVE-2026-45417DataEase: SQL injection vulnerability
- CVE-2026-45534DataEase: RCE Vulnerability
- CVE-2026-50530DataEase: Token with Overly Broad Privileges in Share Mode: Access to Unshared Datasets
Product normalization is registry-driven with AI assist and human review. How it works