dataease security advisories
8 threat alerts tracking vulnerabilities and security advisories that affect dataease products.
Vulnios monitors dataease CVE feeds, vendor advisories, CISA KEV listings, and exploit-prediction data continuously. Each alert below is enriched with severity, exploitation status, affected products, and a remediation path. Use this page to scan recent dataease security news in one place, or click into an individual alert for full detail.
Critical Vulnerability: CVE-2025-58045 — dataease — dataease
Dataease is an open source data analytics and visualization platform. In Dataease versions up to 2.10.12, the patch introduced to mitigate DB2 JDBC deserialization remote code execution attacks only b
criticalCVE-2025-58045Critical Vulnerability: CVE-2025-58046 — dataease — dataease
Dataease is an open-source data visualization and analysis platform. In versions up to and including 2.10.12, the Impala data source is vulnerable to remote code execution due to insufficient filterin
criticalCVE-2025-58046Critical Vulnerability: CVE-2025-58748 — dataease — dataease
Dataease is an open source data analytics and visualization platform. In Dataease versions up to 2.10.12 the H2 data source implementation (H2.java) does not verify that a provided JDBC URL starts wit
criticalCVE-2025-58748Critical Vulnerability: CVE-2025-64163 — dataease — dataease
DataEase is an open source data visualization analysis tool. In versions 2.10.14 and below, the vendor added a blacklist to filter ldap:// and ldaps://. However, omission of protection for the dns://
criticalCVE-2025-64163Critical Vulnerability: CVE-2025-64164 — dataease — dataease
Dataease is an open source data visualization analysis tool. In versions 2.10.14 and below, DataEase did not properly filter when establishing JDBC connections to Oracle, resulting in a risk of JNDI i
criticalCVE-2025-64164Critical Vulnerability: CVE-2025-64428 — dataease — dataease
Dataease is an open source data visualization analysis tool. Versions prior to 2.10.17 are vulnerable to JNDI injection. A blacklist was added in the patch for version 2.10.14. However, JNDI injection
criticalCVE-2025-64428Critical Vulnerability: CVE-2026-33082 — dataease — dataease
DataEase is an open source data visualization analysis tool. Versions 2.10.20 and below contain a SQL injection vulnerability in the dataset export functionality. The expressionTree parameter in POST
criticalCVE-2026-33082Critical Vulnerability: CVE-2026-33122 — dataease — dataease
DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below contain a SQL injection vulnerability in the API datasource update process. When a new table definition
criticalCVE-2026-33122
Track dataease exposure across your environment
Vulnios automatically cross-references your asset inventory against new dataease CVEs and surfaces only what affects you. No more sifting manually — actionable findings only.
Start a free scan