Dataease vulnerabilities
108 CVEs and advisories name Dataease as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-46997DataEase's H2 datasource has a remote command execution risk
- CVE-2024-46985DataEase has an XXE vulnerability
- CVE-2024-31441Arbitrary File Reading in DataEase
- CVE-2024-30269DataEase has database configuration information exposure vulnerability
- CVE-2024-23328The Dataease datasource exists deserialization and arbitrary file read vulnerability
- CVE-2023-40183DataEase has a vulnerability to obtain user cookies
- CVE-2023-37258DataEase has a SQL injection vulnerability that can bypass blacklists
- CVE-2023-37257The DataEase panel and dataset have a stored XSS vulnerability
- CVE-2023-35164Unauthorized users can manipulate a dashboard created by an administrator in DataEase
- CVE-2023-34463Unauthorized users can delete applications in DataEase
- CVE-2023-35168DataEase has a privilege bypass vulnerability
- CVE-2023-33963DataEase data source has deserialization vulnerability
- CVE-2023-32310DataEase API interface has IDOR vulnerability
- CVE-2023-28637DataEase AWS redshift data source exists for remote code execution vulnerability
- CVE-2023-28437SQL injection vulnerability due to the keyword blacklist for defending against SQL injection will be bypassed
- CVE-2023-28435Dataease file upload interface does not verify permission or file type
- CVE-2023-25807DataEase dashboard has a stored XSS vulnerability
- CVE-2022-39312Dataease Mysql Data Source JDBC Connection Parameters Not Verified Leads to Deserialization Vulnerability