Known vulnerabilities in DataEase 1.11.3

Vendor: DataEase
Software: DataEase
Version: 1.11.3
Software CPE: cpe:2.3:a:dataease:dataease:*:*:*:*:*:*:*:*
Total vulnerabilities: 8
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting DataEase version 1.11.3 DataEase 1.11.3 is affected by 8 vulnerabilities: 1 high, 5 medium, 2 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98727 - Deserialization of Untrusted Data
CVE-2024-47074
CWE-502 Medium
No
No
1.18.25 16.10.2024 SB2024101650
#VU126328 - Improper input validation
CVE-2024-23328
CWE-20 Medium
No
No
1.18.15 01.02.2024 SB2024020163
#VU85619 - Exposure of sensitive information to an unauthorized actor
CVE-2024-21733
CWE-200 Medium
Public exploit available
No
1.18.24 19.01.2024 SB2024011929
SB2024020819
SB2024030424
and 9 more
#VU74161 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-28435
CWE-79 Low
No
No
1.18.5 29.03.2023 SB2023032919
#VU74160 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-28437
CWE-89 High
No
No
1.18.5 29.03.2023 SB2023032919
#VU126325 - Improper input validation
CVE-2023-28637
CWE-20 Medium
No
No
1.18.5 28.03.2023 SB2023032919
#VU126326 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-25807
CWE-79 Low
No
No
1.18.3 28.02.2023 SB2023022882
#VU126327 - Improper input validation
CVE-2022-39312
CWE-20 Medium
No
No
1.15.2 13.10.2022 SB2022101356