dataease Vulnerability Advisory Catalog

Total 72 security vulnerabilities recorded for dataease software and firmware.

← Back to All Vendors
CVE-2025-58045 CRITICAL
Component: dataease

Dataease is an open source data analytics and visualization platform. In Dataease versions up to 2.10.12, the patch introduced to mitigate DB2 JDBC de...

📅 2025-09-15
CVSS 9.8 Dossier →
CVE-2025-57773 CRITICAL
Component: dataease

DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.12, because DB2 parameters are not filtered, a JND...

📅 2025-08-25
CVSS 9.8 Dossier →
CVE-2025-57772 CRITICAL
Component: dataease

DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.12, there is a H2 JDBC RCE bypass in DataEase. If ...

📅 2025-08-25
CVSS 9.8 Dossier →
CVE-2025-53006 CRITICAL
Component: dataease

DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.11, in both PostgreSQL and Redshift, apart from pa...

📅 2025-07-02
CVSS 9.8 Dossier →
CVE-2025-53005 CRITICAL
Component: dataease

DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.11, there is a bypass vulnerability in Dataease's ...

📅 2025-07-01
CVSS 9.8 Dossier →
CVE-2025-53004 CRITICAL
Component: dataease

DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.11, there is a bypass vulnerability in Dataease's ...

📅 2025-06-30
CVSS 9.8 Dossier →
CVE-2025-49003 CRITICAL
Component: dataease

DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.11, a threat actor may take advantage of a feature...

📅 2025-06-26
CVSS 9.8 Dossier →
CVE-2025-49002 CRITICAL
Component: dataease

DataEase is an open source business intelligence and data visualization tool. Versions prior to version 2.10.10 have a flaw in the patch for CVE-2025-...

📅 2025-06-03
CVSS 9.8 Dossier →
CVE-2025-49001 CRITICAL
Component: dataease

DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.10, secret verification does not take effect succe...

📅 2025-06-03
CVSS 9.8 Dossier →
Component: dataease

DataEase is an open source business intelligence and data visualization tool. A bypass of CVE-2025-46566's patch exists in versions prior to 2.10.10. ...

📅 2025-06-03
CVSS 8.8 Dossier →
Component: dataease

DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.6, a bypass of the patch for CVE-2025-27103 allows...

📅 2025-06-03
CVSS 8.8 Dossier →
CVE-2025-46566 CRITICAL
Component: dataease

DataEase is an open-source BI tool alternative to Tableau. Prior to version 2.10.9, authenticated users can complete RCE through the backend JDBC link...

📅 2025-05-01
CVSS 9.8 Dossier →
CVE-2025-32966 CRITICAL
Component: dataease

DataEase is an open-source BI tool alternative to Tableau. Prior to version 2.10.8, authenticated users can complete RCE through the backend JDBC link...

📅 2025-04-23
CVSS 9.8 Dossier →
CVE-2025-27138 CRITICAL
Component: dataease

DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.6, there is a flaw in the authentication in the io...

📅 2025-03-13
CVSS 9.8 Dossier →
Component: dataease

DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.6, a bypass for the patch for CVE-2024-55953 allow...

📅 2025-03-13
CVSS 6.5 Dossier →
Component: dataease

DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.6, authenticated users can read and deserialize ar...

📅 2025-03-13
CVSS 6.5 Dossier →
CVE-2024-57707 CRITICAL
Component: dataease

An issue in DataEase v1 allows an attacker to execute arbitrary code via the user account and password components....

📅 2025-02-07
CVSS 9.8 Dossier →
CVE-2024-56511 CRITICAL
Component: dataease

DataEase is an open source data visualization analysis tool. Prior to 2.10.4, there is a flaw in the authentication in the io.dataease.auth.filter.Tok...

📅 2025-01-10
CVSS 9.8 Dossier →
Component: dataease

DataEase is an open source business analytics tool. Authenticated users can read and deserialize arbitrary files through the background JDBC connectio...

📅 2024-12-18
CVSS 8.1 Dossier →
Component: dataease

DataEase is an open source business analytics tool. Authenticated users can remotely execute code through the backend JDBC connection. When constructi...

📅 2024-12-18
CVSS 8.8 Dossier →
CVE-2024-52295 CRITICAL
Component: dataease

DataEase is an open source data visualization analysis tool. Prior to 2.10.2, DataEase allows attackers to forge jwt and take over services. The JWT s...

📅 2024-11-13
CVSS 9.8 Dossier →
CVE-2024-47073 CRITICAL
Component: dataease

DataEase is an open source data visualization analysis tool that helps users quickly analyze data and gain insights into business trends. In affected ...

📅 2024-11-07
CVSS 9.1 Dossier →
CVE-2024-47074 CRITICAL
Component: dataease

DataEase is an open source data visualization analysis tool. In Dataease, the PostgreSQL data source in the data source function can customize the JDB...

📅 2024-10-11
CVSS 9.8 Dossier →
CVE-2024-46997 CRITICAL
Component: dataease

DataEase is an open source data visualization analysis tool. Prior to version 2.10.1, an attacker can achieve remote command execution by adding a car...

📅 2024-09-23
CVSS 9.8 Dossier →
Page 2 of 3 (72 Total Records)