dataease dataease vulnerabilities

CVEs per yearBy the year they were published

1. 20221
2. 202312
3. 202410
4. 202526
5. 202643

Newest CVEs

• CVE-2026-102755

  DataEase Datasource/Dataset Folder Name Stored Cross-Site Scripting

  dataease · dataease

  Medium5.1
• CVE-2026-102756

  DataEase bar-horizontal Axis Label Tooltip Stored Cross-Site Scripting

  dataease · dataease

  Medium5.1
• CVE-2026-104143

  DataEase: Stored SQL Injection via dateFormat field templates

  dataease · dataease

  High8.7
• CVE-2026-104142

  DataEase: Stored SQL Injection in group-field binning bounds

  dataease · dataease

  High8.7
• CVE-2026-104141

  DataEase: SQL Injection in datasource metadata identifiers

  dataease · dataease

  High8.7
• CVE-2023-40772

  A directory Traversal vulnerability in DataEase before 1.18.10 allows a remote attacker to obtain sensitive information via a a crafted request to the…

  DataEase · DataEase

  Medium4.3
• CVE-2026-82879

  DataEase before 2.10.26 Access Control Bypass via Share Tickets

  dataease · dataease

  Medium5.3
• CVE-2026-82878

  DataEase before 2.10.26 Missing Object-Level Authorization on Geographic, Linkage and Chart Endpoints

  dataease · dataease

  Medium5.3
• CVE-2026-45532

  DataEase has a Path Traversal Vulnerability

  dataease · dataease

  High8.7
• CVE-2026-49867

  DataEase: Authenticated Stored XSS in DataEase Template Static Resources

  dataease · dataease

  Medium6.3