Vulnerabilities
Summary — last 7 days
New vulnerabilities4,611▼ 511 vs. last week
Critical / high1,826▼ 1,072 vs. last week
New active exploitation (KEV)8▼ 1 vs. last week
Unscored (no CVSS)865▲ 767 vs. last week
More filters
104 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | High (8.7) | 0.26% | — | DataeaseAI | 10/14/2026 | 10/15/2026 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.26, authenticated users can store a crafted custom dateFormat for a dataset field. DatasetTableFieldDTO.dateFormat is inserted without validation into date conversion templates used by Dimension2SQLObj, CustomWhere2Str, Field2SQLObj,… | |
| Deferred | High (8.7) | 0.29% | — | DataeaseAI | 10/14/2026 | 10/15/2026 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.26, authenticated users can store crafted FieldGroupDTO.min, FieldGroupDTO.max, FieldGroupDTO.startTime, or FieldGroupDTO.endTime values in dataset group-field binning definitions. Utils.transGroupFieldToSql inserts these free-form values… | |
| Deferred | High (8.7) | 0.28% | — | DataeaseAI | 10/14/2026 | 10/15/2026 | DataEase is an open source data visualization and analysis tool. Authenticated users with datasource access can supply crafted schema names, connection usernames, table names, or database names to datasource metadata operations, including getSchema, validate, save, and update flows. CalciteProvider inserts these… | |
| Deferred | Medium (5.1) | 0.28% | — | Fit2cloud DataeaseAI | 10/14/2026 | 10/20/2026 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.26, authenticated users who can edit dataset fields and chart configuration can store an HTML-bearing dimension value in a bar-horizontal chart. When lengthLimit truncates the category axis label, configAxisLabelLengthLimit in… | |
| Deferred | Medium (5.1) | 0.35% | — | Fit2cloud DataeaseAI | 10/14/2026 | 10/14/2026 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.26, authenticated users with folder creation permission can store HTML-bearing names through datasource/createFolder or datasetTree/save. The datasource and dataset Move to dialogs in… | |
| Deferred | Low (2.1) | 0.37% | — | DataeaseAI | 10/12/2026 | 10/13/2026 | A flaw has been found in DataEase up to 3.0.0. The impacted element is the function Utils.buildCalcField of the file io/dataease/engine/utils/Utils.java. This manipulation of the argument calculated field causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be… | |
| Deferred | Medium (4.3) | 1.1% | — | DataeaseAI | 9/14/2026 | 9/22/2026 | A directory Traversal vulnerability in DataEase before 1.18.10 allows a remote attacker to obtain sensitive information via a a crafted request to the StaticResourceController.java component. | |
| Deferred | Medium (5.1) | 0.35% | — | DataeaseAI | 9/13/2026 | 9/15/2026 | A vulnerability has been found in DataEase up to 2.10.25/2.10.26. Affected by this issue is the function buildTooltip of the file core/core-frontend/src/views/chart/components/js/panel/charts/map/symbolic-map.ts of the component Symbolic Map. Such manipulation of the argument… | |
| Deferred | Medium (5.3) | 0.36% | — | DataeaseAI | 8/31/2026 | 9/8/2026 | DataEase before 2.10.26 contains multiple access control defects in the sharing link module. Tickets are not bound to the target share UUID, so a valid ticket issued for one share can be reused against another (ShareTicketManage.validateTicket / POST /de2api/share/proxyInfo). The POST /de2api/share/validate endpoint… | |
| Deferred | Medium (5.3) | 0.34% | — | DataeaseAI | 8/31/2026 | 9/8/2026 | DataEase versions before 2.10.26 omit object-level authorization checks on geographic information, dashboard linkage, and chart detail REST endpoints, allowing authenticated users to access resources belonging to other users. Attackers can overwrite or delete map geometry, modify dashboard linkages, and retrieve chart… | |
| Deferred | High (8.7) | 0.52% | — | DataeaseAI | 8/18/2026 | 9/18/2026 | DataEase is an open source data visualization and analysis tool. Versions prior to 2.10.23 have a path traversal vulnerability. The root cause is that on Windows, the `FILE_SEPARATOR` is `\`, while the server only filters the `/` character during string truncation. The vulnerability has been fixed in v2.10.23. No… | |
| Deferred | High (7.1) | 0.56% | — | DataeaseAI | 7/15/2026 | 7/17/2026 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase can be exploited by uploading payload.zip through the Excel upload API /datasource/upload, creating an H2 datasource that uses the zip: protocol, and executing an SQL dataset path where CalciteProvider.jdbcFetchResultField… | |
| Deferred | High (7.1) | 0.47% | — | DataeaseAI | 7/15/2026 | 7/18/2026 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase SQL preview exposes DatasetDataApi.previewSql/previewSqlCheck through /de2api/datasetData/previewSql, accepts PreviewSqlDTO.sql, PreviewSqlDTO.datasourceId, and PreviewSqlDTO.isCross, then DatasetDataManage.previewSql stores… | |
| Deferred | Medium (6.3) | 0.47% | — | DataeaseAI | 7/15/2026 | 7/18/2026 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase template static resources let authenticated users submit TemplateManageRequest.staticResource through POST /de2api/templateManage/save or DataVisualizationServer.decompression, after which StaticResourceServer.saveFilesToServe… | |
| Deferred | Critical (9.5) | 0.32% | — | DataeaseAI | 7/15/2026 | 7/17/2026 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase enterprise token handling can let TokenFilter#doFilter() pass X-DE-TOKEN values to TokenUtils.validate(), which checks only token presence and length before userBOByToken(token) uses JWT.decode() without signature verification,… | |
| Deferred | High (8.7) | 0.38% | — | DataeaseAI | 7/15/2026 | 7/16/2026 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase SQL-type datasets store attacker-controlled SQL variable defaultValue entries such as ${var} and SqlparserUtils.handleVariableDefaultValue() inserts them with String.replace() without escaping or parameterization, causing… | |
| Deferred | Critical (9) | 0.64% | — | DataeaseAIAmazon Redshift DriverAISpringframework Spring FrameworkAI | 7/15/2026 | 7/16/2026 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase Redshift datasource connections can load attacker-controlled rsjdbc.ini configuration from System.getProperty("java.io.tmpdir"), setting socketFactory=org.springframework.context.support.FileSystemXmlApplicationContext so… | |
| Deferred | High (8.3) | 0.46% | — | DataeaseAI | 7/15/2026 | 7/17/2026 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase export-center deletion can accept path traversal sequences such as ../ in the bulk delete API endpoint and pass attacker-controlled identifiers to ExportCenterManage.delete, allowing recursive deletion of arbitrary server… | |
| Deferred | High (8.5) | 0.46% | — | DataeaseAI | 7/15/2026 | 7/18/2026 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase template saves call TemplateManageService#save, StaticResourceServer#saveFilesToServe, and the /de2api/templateManage/save endpoint with attacker-controlled staticResource names and Base64 content, allowing path traversal and… | |
| Deferred | High (8.7) | 0.38% | — | DataeaseAI | 7/15/2026 | 7/16/2026 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase datasource connection status checks concatenate configuration.getSchema() into getTablesSql and execute the resulting SQL with executeQuery in io.dataease.datasource.provider.CalciteProvider#checkStatus, allowing SQL injection… | |
| Deferred | High (8.7) | 0.47% | — | DataeaseAI | 7/15/2026 | 7/17/2026 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase dashboard SQL variables such as ${deptId} are processed by SqlparserUtils.transFilter(), whose final branch returns raw user input for non-in and non-between operators before SubstitutedSql.replace("${var}", value) splices it… | |
| Deferred | High (8.3) | 0.45% | — | DataeaseAI | 7/7/2026 | 7/8/2026 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, ShareSecretManage uses a hardcoded default share link signature key, allowing an attacker who can obtain a passwordless share for a resource and user to use the known key link-pwd-fit2cloud to forge linkToken JWTs, bypass TokenFilter… | |
| Deferred | Medium (5.1) | 0.47% | — | DataeaseAI | 7/7/2026 | 7/8/2026 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, dashboard text components render stored component content with Vue v-html without server-side HTML sanitization, allowing an authenticated user who can edit dashboard component data to inject HTML with executable event handlers that… | |
| Deferred | High (8.7) | 0.41% | — | DataeaseAI | 7/7/2026 | 7/9/2026 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, chart quota and Y-axis filters embed attacker-controlled filter values directly into generated SQL in Quota2SQLObj.getYWheres() without applying the SQL literal validation and escaping used by other filter paths, allowing an… | |
| Deferred | High (8.7) | 0.80% | — | DataeaseAI | 7/7/2026 | 7/8/2026 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, a bypass of the H2 zip protocol and file dropper fix allows an authenticated attacker to upload a zip archive disguised with a .ttf extension through FontManage.saveFile and then exploit it through the zip protocol to achieve remote… |