Known vulnerabilities in DataEase 1.18.0

Vendor: DataEase
Software: DataEase
Version: 1.18.0
Software CPE: cpe:2.3:a:dataease:dataease:*:*:*:*:*:*:*:*
Total vulnerabilities: 19
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting DataEase version 1.18.0 DataEase 1.18.0 is affected by 19 vulnerabilities: 5 high, 10 medium, 4 low Critical High Medium Low

Vulnerabilities (19)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU102391 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-55953
CWE-89 Medium
No
No
1.18.27 07.01.2025 SB2025010719
#VU102389 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-55952
CWE-94 Medium
No
No
1.18.27 07.01.2025 SB2025010719
#VU98727 - Deserialization of Untrusted Data
CVE-2024-47074
CWE-502 Medium
No
No
1.18.25 16.10.2024 SB2024101650
#VU126328 - Improper input validation
CVE-2024-23328
CWE-20 Medium
No
No
1.18.15 01.02.2024 SB2024020163
#VU85619 - Exposure of sensitive information to an unauthorized actor
CVE-2024-21733
CWE-200 Medium
Public exploit available
No
1.18.24 19.01.2024 SB2024011929
SB2024020819
SB2024030424
and 9 more
#VU81079 - Unrestricted Upload of File with Dangerous Type
CVE-2023-40183
CWE-434 High
No
No
1.18.11 25.09.2023 SB2023092507
#VU81078 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-40771
CWE-89 High
No
No
1.18.11 25.09.2023 SB2023092507
#VU80609 - Exposure of sensitive information to an unauthorized actor
CVE-2023-40772
CWE-200 Medium
No
No
1.18.10 11.09.2023 SB2023091147
#VU78571 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-37258
CWE-89 High
No
No
1.18.9 24.07.2023 SB2023072421
#VU78570 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-37257
CWE-79 Low
No
No
1.18.9 24.07.2023 SB2023072421
#VU77689 - Improper Access Control
CVE-2023-34463
CWE-284 Medium
No
No
1.18.8 26.06.2023 SB2023062611
#VU77688 - Exposure of sensitive information to an unauthorized actor
CVE-2023-35168
CWE-200 Medium
No
No
1.18.8 26.06.2023 SB2023062611
#VU77687 - Improper Access Control
CVE-2023-35164
CWE-284 Medium
No
No
1.18.8 26.06.2023 SB2023062611
#VU76762 - Improper Access Control
CVE-2023-32310
CWE-284 Low
No
No
1.18.7 01.06.2023 SB2023060120
#VU76750 - Deserialization of Untrusted Data
CVE-2023-33963
CWE-502 High
No
No
1.18.7 01.06.2023 SB2023060120
#VU74161 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-28435
CWE-79 Low
No
No
1.18.5 29.03.2023 SB2023032919
#VU74160 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-28437
CWE-89 High
No
No
1.18.5 29.03.2023 SB2023032919
#VU126325 - Improper input validation
CVE-2023-28637
CWE-20 Medium
No
No
1.18.5 28.03.2023 SB2023032919
#VU126326 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-25807
CWE-79 Low
No
No
1.18.3 28.02.2023 SB2023022882