DataEase
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 89 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 8, 2022 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →DataEase before 2.10.26 Access Control Bypass via Share Tickets
DataEase before 2.10.26 Missing Object-Level Authorization on Geographic, Linkage and Chart Endpoints
DataEase Data Dashboard SqlVariable transFilter Unfiltered SQL Injection
DataEase: Stored SQL Injection Vulnerability
DataEase: Arbitrary SQL execution in preview path (direct data disclosure)
DataEase: Arbitrary File Write Vulnerability
DataEase: Token with Overly Broad Privileges in Share Mode: Access to Unshared Datasets
DataEase: Link Token Leakage Prior to Share Password/Ticket Validation
DataEase: authenticated stored XSS in the dashboard text components
DataEase: Hardcoded JWT Signing Secret in ShareLink
Monitor DataEase in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.