Vendor

    Dataease

    116 known vulnerabilities in products by Dataease, 0 of them actively exploited (CISA KEV).

    Key figures

    116

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    38

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Dataease
    CriticalCVE-2025-49002

    Dataease H2 Database Remote Code Execution (RCE) Bypass Vulnerability

    		9.8
    CriticalCVE-2024-56511

    DataEase has an unauthorized vulnerability

    		9.8
    CriticalCVE-2025-49001

    Dataease Authentication Bypass Vulnerability

    		9.8
    CriticalCVE-2025-57772

    Dataease H2 JDBC RCE Bypass

    		9.8
    CriticalCVE-2025-57773

    Dataease DB2 Aspectweaver Deserialization Arbitrary File Write Vulnerability

    		9.8
    HighCVE-2025-48999

    Dataease Redshift Data Source JDBC Connection Parameters Not Verified Leads to RCE Vulnerability

    		8.8
    CriticalCVE-2025-32966

    Dataease H2 JDBC Connection Remote Code Execution

    		9.8
    MediumCVE-2024-30269

    DataEase has database configuration information exposure vulnerability

    		5.3
    CriticalCVE-2025-58046

    Dataease has a JDBC attack vulnerability in the Impala datasource

    		9.8
    CriticalCVE-2022-39312

    DataEase: Deserialization of Untrusted Data

    		9.8
    CriticalCVE-2024-46997

    DataEase's H2 datasource has a remote command execution risk

    		9.8
    CriticalCVE-2025-64163

    DataEase's DB2 is vulnerable to SSRF

    		9.8
    CriticalCVE-2023-33963

    DataEase data source has deserialization vulnerability

    		9.8
    CriticalCVE-2024-47073

    Dataease arbitrary interface access vulnerability

    		9.1
    CriticalCVE-2022-34113

    DataEase: Code Execution

    		9.8
    HighCVE-2026-55633

    DataEase H2 RCE via Zip Protocol & File Dropper Fix bypass

    		—
    CriticalCVE-2025-49003

    Dataease H2 JDBC Connection Remote Code Execution

    		9.8
    CriticalCVE-2022-34115

    DataEase: security vulnerability

    		9.8
    HighCVE-2026-32950

    SQLBot: RCE via SQL Injection in Excel Upload Endpoint

    also in 1 other product

    		8.8
    CriticalCVE-2024-23328

    The Dataease datasource exists deserialization and arbitrary file read vulnerability

    		9.1
    HighCVE-2025-62420

    DataEase vulnerable to remote code execution via H2 JDBC driver bypass

    		8.8
    CriticalCVE-2025-58748

    Dataease H2 data source JDBC URL validation bypass leads to remote code execution

    		9.8
    CriticalCVE-2026-45534

    DataEase: RCE Vulnerability

    		—
    CriticalCVE-2026-32140

    Dataease: Redshift JDBC RCE Bypass

    		8.8
    HighCVE-2026-53729

    DataEase ExportCenter IDOR allows cross-user export task access

    		—

    All vulnerabilities in search

    Products

    Products by Dataease
    DataEase1010
    SQLBot150