Known vulnerabilities in DataEase 1.18.22

Vendor: DataEase
Software: DataEase
Version: 1.18.22
Software CPE: cpe:2.3:a:dataease:dataease:*:*:*:*:*:*:*:*
Total vulnerabilities: 4
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting DataEase version 1.18.22 DataEase 1.18.22 is affected by 4 vulnerabilities: 4 medium Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU102391 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-55953
CWE-89 Medium
No
No
1.18.27 07.01.2025 SB2025010719
#VU102389 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-55952
CWE-94 Medium
No
No
1.18.27 07.01.2025 SB2025010719
#VU98727 - Deserialization of Untrusted Data
CVE-2024-47074
CWE-502 Medium
No
No
1.18.25 16.10.2024 SB2024101650
#VU85619 - Exposure of sensitive information to an unauthorized actor
CVE-2024-21733
CWE-200 Medium
Public exploit available
No
1.18.24 19.01.2024 SB2024011929
SB2024020819
SB2024030424
and 9 more