Known vulnerabilities in DataEase 1.18.9

Vendor: DataEase
Software: DataEase
Version: 1.18.9
Software CPE: cpe:2.3:a:dataease:dataease:*:*:*:*:*:*:*:*
Total vulnerabilities: 8
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting DataEase version 1.18.9 DataEase 1.18.9 is affected by 8 vulnerabilities: 2 high, 6 medium Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU102391 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-55953
CWE-89 Medium
No
No
1.18.27 07.01.2025 SB2025010719
#VU102389 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-55952
CWE-94 Medium
No
No
1.18.27 07.01.2025 SB2025010719
#VU98727 - Deserialization of Untrusted Data
CVE-2024-47074
CWE-502 Medium
No
No
1.18.25 16.10.2024 SB2024101650
#VU126328 - Improper input validation
CVE-2024-23328
CWE-20 Medium
No
No
1.18.15 01.02.2024 SB2024020163
#VU85619 - Exposure of sensitive information to an unauthorized actor
CVE-2024-21733
CWE-200 Medium
Public exploit available
No
1.18.24 19.01.2024 SB2024011929
SB2024020819
SB2024030424
and 9 more
#VU81079 - Unrestricted Upload of File with Dangerous Type
CVE-2023-40183
CWE-434 High
No
No
1.18.11 25.09.2023 SB2023092507
#VU81078 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-40771
CWE-89 High
No
No
1.18.11 25.09.2023 SB2023092507
#VU80609 - Exposure of sensitive information to an unauthorized actor
CVE-2023-40772
CWE-200 Medium
No
No
1.18.10 11.09.2023 SB2023091147