Known vulnerabilities in DataEase 2.6.0 - page 3

Vendor: DataEase
Software: DataEase
Version: 2.6.0
Software CPE: cpe:2.3:a:dataease:dataease:*:*:*:*:*:*:*:*
Total vulnerabilities: 66
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting DataEase version 2.6.0 DataEase 2.6.0 is affected by 66 vulnerabilities: 8 high, 30 medium, 28 low Critical High Medium Low

Vulnerabilities (66)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126355 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-33082
CWE-89 Medium
No
No
2.10.21 16.04.2026 SB2026041646
#VU126354 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-33083
CWE-89 Medium
No
No
2.10.21 16.04.2026 SB2026041646
#VU126353 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-33084
CWE-89 Low
No
No
2.10.21 16.04.2026 SB2026041646
#VU126346 - Improper input validation
CVE-2026-32939
CWE-20 Low
No
No
2.10.20 16.04.2026 SB20260316118
#VU126345 - Improper input validation
CVE-2025-62419
CWE-20 Low
No
No
2.10.14 16.04.2026 SB2026041645
#VU126344 - Improper input validation
CVE-2025-62420
CWE-20 High
No
No
2.10.14 16.04.2026 SB2026041645
#VU126343 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-62421
CWE-79 Low
No
No
2.10.14 16.04.2026 SB2026041645
#VU126342 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-62422
CWE-89 Low
No
No
2.10.14 16.04.2026 SB2026041645
#VU126341 - Improper Authentication
CVE-2025-49001
CWE-287 High
No
No
2.10.10 16.04.2026 SB2026041644
#VU126340 - Improper Access Control
CVE-2025-49002
CWE-284 Medium
No
No
2.10.10 16.04.2026 SB2026041644
#VU126339 - Improper input validation
CVE-2025-48998
CWE-20 Low
No
No
2.10.10 16.04.2026 SB2026041644
#VU126338 - Improper input validation
CVE-2025-48999
CWE-20 Medium
No
No
2.10.10 16.04.2026 SB2026041644
#VU126337 - Improper input validation
CVE-2025-46566
CWE-20 Medium
No
No
2.10.9 16.04.2026 SB2026041643
#VU126336 - Improper input validation
CVE-2025-32966
CWE-20 Medium
No
No
2.10.8 16.04.2026 SB2026041641
#VU118658 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-64428
CWE-94 Medium
Public exploit available
No
2.10.17 21.11.2025 SB2025112101
#VU111962 - Improper input validation
CVE-2025-49003
CWE-20 Medium
No
No
2.10.11 26.06.2025 SB2025062615
#VU126335 - Improper input validation
CVE-2025-24974
CWE-20 Low
No
No
2.10.6 13.03.2025 SB2025031349
#VU126334 - Improper input validation
CVE-2025-27103
CWE-20 Low
No
No
2.10.6 13.03.2025 SB2025031349
#VU126333 - Improper Access Control
CVE-2025-27138
CWE-284 Medium
No
No
2.10.6 13.03.2025 SB2025031349
#VU126332 - Improper Access Control
CVE-2024-56511
CWE-284 Medium
No
No
2.10.4 10.01.2025 SB2025011066


Showing elements 41 - 60 out of 66