Known vulnerabilities in DataEase 2.10.1 - page 3

Vendor: DataEase
Software: DataEase
Version: 2.10.1
Software CPE: cpe:2.3:a:dataease:dataease:*:*:*:*:*:*:*:*
Total vulnerabilities: 76
Public exploits: 10
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting DataEase version 2.10.1 DataEase 2.10.1 is affected by 76 vulnerabilities: 17 high, 30 medium, 29 low Critical High Medium Low

Vulnerabilities (76)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126349 - Improper Access Control
CVE-2026-40899
CWE-284 Low
No
No
2.10.21 16.04.2026 SB2026041646
#VU126348 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-40900
CWE-89 Low
No
No
2.10.21 16.04.2026 SB2026041646
#VU126347 - Deserialization of Untrusted Data
CVE-2026-40901
CWE-502 Medium
No
No
2.10.21 16.04.2026 SB2026041646
#VU126346 - Improper input validation
CVE-2026-32939
CWE-20 Low
No
No
2.10.20 16.04.2026 SB20260316118
#VU126345 - Improper input validation
CVE-2025-62419
CWE-20 Low
No
No
2.10.14 16.04.2026 SB2026041645
#VU126344 - Improper input validation
CVE-2025-62420
CWE-20 High
No
No
2.10.14 16.04.2026 SB2026041645
#VU126343 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-62421
CWE-79 Low
No
No
2.10.14 16.04.2026 SB2026041645
#VU126342 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-62422
CWE-89 Low
No
No
2.10.14 16.04.2026 SB2026041645
#VU126341 - Improper Authentication
CVE-2025-49001
CWE-287 High
No
No
2.10.10 16.04.2026 SB2026041644
#VU126340 - Improper Access Control
CVE-2025-49002
CWE-284 Medium
No
No
2.10.10 16.04.2026 SB2026041644
#VU126339 - Improper input validation
CVE-2025-48998
CWE-20 Low
No
No
2.10.10 16.04.2026 SB2026041644
#VU126338 - Improper input validation
CVE-2025-48999
CWE-20 Medium
No
No
2.10.10 16.04.2026 SB2026041644
#VU126337 - Improper input validation
CVE-2025-46566
CWE-20 Medium
No
No
2.10.9 16.04.2026 SB2026041643
#VU126336 - Improper input validation
CVE-2025-32966
CWE-20 Medium
No
No
2.10.8 16.04.2026 SB2026041641
#VU124039 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-32140
CWE-22 Medium
Public exploit available
No
2.10.20 16.03.2026 SB20260316118
#VU124036 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-32139
CWE-79 Low
Public exploit available
No
2.10.20 16.03.2026 SB20260316118
#VU124032 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-32137
CWE-89 High
Public exploit available
No
2.10.20 16.03.2026 SB20260316118
#VU121802 - Improper Restriction of Excessive Authentication Attempts
CVE-2026-23958
CWE-307 High
No
No
2.10.19 21.01.2026 SB2026012127
#VU118658 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-64428
CWE-94 Medium
Public exploit available
No
2.10.17 21.11.2025 SB2025112101
#VU118062 - Improper input validation
CVE-2025-64164
CWE-20 High
Public exploit available
No
2.10.15 04.11.2025 SB2025110430


Showing elements 41 - 60 out of 76