Known vulnerabilities in DataEase

Vendor: DataEase
Software: DataEase
Software CPE: cpe:2.3:a:dataease:dataease:*:*:*:*:*:*:*:*
Total vulnerabilities: 102
Public exploits: 11
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting DataEase DataEase is affected by 102 known vulnerabilities: 23 high, 46 medium, 33 low Critical High Medium Low

Vulnerabilities (102)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140509 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
2.10.26 30.07.2026 SB2026073056
#VU140508 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
2.10.26 30.07.2026 SB2026073056
#VU140507 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 Medium
No
No
2.10.26 30.07.2026 SB2026073056
#VU140506 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 Medium
No
No
2.10.26 30.07.2026 SB2026073056
#VU140505 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 Medium
No
No
2.10.26 30.07.2026 SB2026073056
#VU140502 - Missing Authorization
CWE-862 Low
No
No
2.10.26 30.07.2026 SB2026073056
#VU140503 - Missing Authorization
CWE-862 Low
No
No
2.10.26 30.07.2026 SB2026073056
#VU140504 - Authorization Bypass Through User-Controlled Key
CWE-639 Low
No
No
2.10.26 30.07.2026 SB2026073056
#VU140498 - Improper Access Control
CWE-284 Low
No
No
2.10.26 30.07.2026 SB2026073056
#VU140499 - Missing Authentication for Critical Function
CWE-306 Low
No
No
2.10.26 30.07.2026 SB2026073056
#VU140500 - Missing Authorization
CWE-862 Medium
No
No
2.10.26 30.07.2026 SB2026073056
#VU140501 - Missing Authorization
CWE-862 Low
No
No
2.10.26 30.07.2026 SB2026073056
#VU140497 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 Medium
No
No
2.10.26 30.07.2026 SB2026073056
#VU134831 - Authorization Bypass Through User-Controlled Key
CVE-2026-53730
CWE-639 Low
No
No
2.10.24 18.06.2026 SB2026061831
#VU134830 - Improper input validation
CVE-2026-53751
CWE-20 Medium
No
No
2.10.24 18.06.2026 SB2026061831
#VU134829 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-55631
CWE-22 Medium
No
No
2.10.24 18.06.2026 SB2026061831
#VU134828 - Improper input validation
CVE-2026-55633
CWE-20 Medium
No
No
2.10.24 18.06.2026 SB2026061831
#VU134827 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-55635
CWE-89 Low
No
No
2.10.24 18.06.2026 SB2026061831
#VU134826 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-55647
CWE-79 Low
No
No
2.10.24 18.06.2026 SB2026061831
#VU134825 - Use of Hard-coded Credentials
CVE-2026-57172
CWE-798 High
No
No
2.10.24 18.06.2026 SB2026061831


Showing elements 1 - 20 out of 102