dataease vulnerabilities

CVEs per yearBy the year they were published

1. 20221
2. 202312
3. 202410
4. 202526
5. 202659

Newest CVEs

• CVE-2026-121453

  SQLBot through 1.10.3 Path Traversal via datasource importToDb Endpoint

  dataease · SQLBot

  Medium5.1
• CVE-2026-102755

  DataEase Datasource/Dataset Folder Name Stored Cross-Site Scripting

  dataease · dataease

  Medium5.1
• CVE-2026-102756

  DataEase bar-horizontal Axis Label Tooltip Stored Cross-Site Scripting

  dataease · dataease

  Medium5.1
• CVE-2026-104143

  DataEase: Stored SQL Injection via dateFormat field templates

  dataease · dataease

  High8.7
• CVE-2026-104142

  DataEase: Stored SQL Injection in group-field binning bounds

  dataease · dataease

  High8.7
• CVE-2026-104141

  DataEase: SQL Injection in datasource metadata identifiers

  dataease · dataease

  High8.7
• CVE-2026-93660

  SQLBot through 1.10.1 Improper Access Control via Dashboard Update

  dataease · SQLBot

  High7.1
• CVE-2026-53557

  SQLBot: Second-Order SQL Injection via Excel Datasource Leading to Remote Command Execution

  dataease · SQLBot

  High7.7
• CVE-2026-53555

  Stored XSS via SVG Upload

  dataease · SQLBot

  Medium5.1
• CVE-2026-53556

  SQLBot: Authenticated SQL Injection in previewData Resulting in Arbitrary File Read

  dataease · SQLBot

  Medium6.0