Dataease vulnerabilities
108 CVEs and advisories name Dataease as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-64164DataEase is vulnerable to Oracle JNDI Injection
- CVE-2025-64163DataEase's DB2 is vulnerable to SSRF
- CVE-2025-62419DataEase vulnerable to JDBC URL injection in DB2 and MongoDB data source configuration
- CVE-2025-62420DataEase vulnerable to remote code execution via H2 JDBC driver bypass
- CVE-2025-62421DataEase vulnerable to stored cross-site scripting via file upload bypass
- CVE-2025-62422DataEase SQL injection vulnerability
- CVE-2025-58748Dataease H2 data source JDBC URL validation bypass leads to remote code execution
- CVE-2025-58046Dataease has a JDBC attack vulnerability in the Impala datasource
- CVE-2025-58045Dataease server-side request forgery via unfiltered DB2 JDBC ldap parameter
- CVE-2025-57772Dataease H2 JDBC RCE Bypass
- CVE-2025-57773Dataease DB2 Aspectweaver Deserialization Arbitrary File Write Vulnerability
- CVE-2025-53006Dataease PostgreSQL & Redshift Data Source JDBC Connection Parameters Bypass Vulnerability
- CVE-2025-53005Dataease PostgreSQL Data Source JDBC Connection Parameters Bypass Vulnerability
- CVE-2025-53004Dataease Redshift Data Source JDBC Connection Parameters Bypass Vulnerability
- CVE-2025-49003Dataease H2 JDBC Connection Remote Code Execution
- CVE-2025-49002Dataease H2 Database Remote Code Execution (RCE) Bypass Vulnerability
- CVE-2025-49001Dataease Authentication Bypass Vulnerability
- CVE-2025-48999Dataease Redshift Data Source JDBC Connection Parameters Not Verified Leads to RCE Vulnerability
- CVE-2025-48998Dataease MYSQL JDBC File Reading Vulnerability
- CVE-2025-46566Dataease redshift JDBC Connection Remote Code Execution
- CVE-2025-32966Dataease H2 JDBC Connection Remote Code Execution
- CVE-2025-27138DataEase has an improper authentication vulnerability
- CVE-2025-27103Dataease Mysql JDBC Connection Parameters Not Being Verified Leads to Arbitrary File Read Vulnerability
- CVE-2025-24974DataEase Mysql JDBC Connection Parameters Not Being Verified Leads to Arbitrary File Read Vulnerability
- CVE-2024-56511DataEase has an unauthorized vulnerability
- CVE-2024-55952Dataease Redshift Data Source JDBC Connection Parameters Not Verified Leads to RCE Vulnerability
- CVE-2024-55953Dataease Mysql JDBC Connection Parameters Not Verified Leads to Deserialization and Arbitrary File Read Vulnerability
- CVE-2024-52295DataEase has a forged JWT token vulnerability
- CVE-2024-47073Dataease arbitrary interface access vulnerability
- CVE-2024-47074Dataease PostgreSQL Data Source JDBC Connection Parameters Not Verified Leads to Deserialization Vulnerability