Skip to content
OpenAdvisories

Vendor

dataease

110 known vulnerabilities.

Products

dataease 94 SQLbot 16
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2026-40901 Public exploit

    DataEase: Quartz Deserialization → Remote Code Execution

    DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below ship the legacy velocity-1.7.jar, which pulls in commons-collections-3.2.1.jar containing the InvokerTransformer deserialization gadget chain. Quartz 2.3.2, also …

    dataease dataease
  • High 8.2
    CVE-2025-49002 Public exploit EPSS 50%

    Dataease H2 Database Remote Code Execution (RCE) Bypass Vulnerability

    DataEase is an open source business intelligence and data visualization tool. Versions prior to version 2.10.10 have a flaw in the patch for CVE-2025-32966 that allow the patch to be bypassed through case insensitivity because INIT and RUNSCRIPT are prohibite…

    dataease dataease
  • Medium 5.3
    CVE-2024-30269 Public exploit EPSS 16%

    DataEase has database configuration information exposure vulnerability

    DataEase, an open source data visualization and analysis tool, has a database configuration information exposure vulnerability prior to version 2.5.0. Visiting the `/de2api/engine/getEngine;.js` path via a browser reveals that the platform's database configur…

    dataease dataease