agentprime: dataease

agentprime: dataeaseEvery new CVE for dataease.https://agentprime.io/CVE-2026-102755: DataEase Datasource/Dataset Folder Name Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2026-102755/https://agentprime.io/advisories/CVE-2026-102755/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 18:45:25 GMTCVECVE-2026-102756: DataEase bar-horizontal Axis Label Tooltip Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2026-102756/https://agentprime.io/advisories/CVE-2026-102756/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 18:44:42 GMTCVECVE-2026-104143: DataEase: Stored SQL Injection via dateFormat field templateshttps://agentprime.io/advisories/CVE-2026-104143/https://agentprime.io/advisories/CVE-2026-104143/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 18:43:34 GMTCVECVE-2026-104142: DataEase: Stored SQL Injection in group-field binning boundshttps://agentprime.io/advisories/CVE-2026-104142/https://agentprime.io/advisories/CVE-2026-104142/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 18:42:36 GMTCVECVE-2026-104141: DataEase: SQL Injection in datasource metadata identifiershttps://agentprime.io/advisories/CVE-2026-104141/https://agentprime.io/advisories/CVE-2026-104141/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 18:41:06 GMTCVECVE-2026-108824: DataEase Utils.java Utils.buildCalcField sql injectionhttps://agentprime.io/advisories/CVE-2026-108824/https://agentprime.io/advisories/CVE-2026-108824/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 10:15:16 GMTCVECVE-2023-40772: Path traversal in DataEasehttps://agentprime.io/advisories/CVE-2023-40772/https://agentprime.io/advisories/CVE-2023-40772/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Sep 2026 00:00:00 GMTCVECVE-2026-90529: DataEase Symbolic Map symbolic-map.ts buildTooltip cross site scriptinghttps://agentprime.io/advisories/CVE-2026-90529/https://agentprime.io/advisories/CVE-2026-90529/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 13 Sep 2026 14:45:11 GMTCVECVE-2026-82879: DataEase before 2.10.26 Access Control Bypass via Share Ticketshttps://agentprime.io/advisories/CVE-2026-82879/https://agentprime.io/advisories/CVE-2026-82879/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 31 Aug 2026 10:51:05 GMTCVECVE-2026-82878: DataEase before 2.10.26 Missing Object-Level Authorization on Geographic, Linkage and Chart Endpointshttps://agentprime.io/advisories/CVE-2026-82878/https://agentprime.io/advisories/CVE-2026-82878/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 31 Aug 2026 10:51:04 GMTCVECVE-2026-45532: DataEase has a Path Traversal Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-45532/https://agentprime.io/advisories/CVE-2026-45532/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 12:53:14 GMTCVECVE-2026-49867: DataEase: Authenticated Stored XSS in DataEase Template Static Resourceshttps://agentprime.io/advisories/CVE-2026-49867/https://agentprime.io/advisories/CVE-2026-49867/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Jul 2026 19:41:52 GMTCVECVE-2026-46684: DataEase: Unauthorized Command Execution Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-46684/https://agentprime.io/advisories/CVE-2026-46684/CVSS 9.5 (Critical). Critical: CVSS score 9.5: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Jul 2026 19:41:15 GMTCVEcriticalCVE-2026-45320: DataEase Data Dashboard SqlVariable transFilter Unfiltered SQL Injectionhttps://agentprime.io/advisories/CVE-2026-45320/https://agentprime.io/advisories/CVE-2026-45320/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Jul 2026 19:40:28 GMTCVECVE-2026-45535: DataEase: Stored SQL Injection Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-45535/https://agentprime.io/advisories/CVE-2026-45535/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Jul 2026 19:39:47 GMTCVECVE-2026-45533: DataEase: Path Traversal Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-45533/https://agentprime.io/advisories/CVE-2026-45533/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Jul 2026 19:39:08 GMTCVECVE-2026-50124: DataEase: Remote Code Execution (RCE) via Zip Protocol & File Dropperhttps://agentprime.io/advisories/CVE-2026-50124/https://agentprime.io/advisories/CVE-2026-50124/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Jul 2026 19:38:14 GMTCVECVE-2026-50030: DataEase: Arbitrary SQL execution in preview path (direct data disclosure)https://agentprime.io/advisories/CVE-2026-50030/https://agentprime.io/advisories/CVE-2026-50030/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Jul 2026 19:24:51 GMTCVECVE-2026-45419: DataEase: Arbitrary File Write Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-45419/https://agentprime.io/advisories/CVE-2026-45419/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Jul 2026 19:21:46 GMTCVECVE-2026-45417: DataEase: SQL injection vulnerabilityhttps://agentprime.io/advisories/CVE-2026-45417/https://agentprime.io/advisories/CVE-2026-45417/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Jul 2026 19:20:16 GMTCVECVE-2026-45534: DataEase: RCE Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-45534/https://agentprime.io/advisories/CVE-2026-45534/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Jul 2026 19:19:10 GMTCVEcriticalCVE-2026-50530: DataEase: Token with Overly Broad Privileges in Share Mode: Access to Unshared Datasetshttps://agentprime.io/advisories/CVE-2026-50530/https://agentprime.io/advisories/CVE-2026-50530/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jul 2026 20:41:07 GMTCVECVE-2026-50529: DataEase: Link Token Leakage Prior to Share Password/Ticket Validationhttps://agentprime.io/advisories/CVE-2026-50529/https://agentprime.io/advisories/CVE-2026-50529/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jul 2026 20:39:23 GMTCVECVE-2026-55647: DataEase: authenticated stored XSS in the dashboard text componentshttps://agentprime.io/advisories/CVE-2026-55647/https://agentprime.io/advisories/CVE-2026-55647/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jul 2026 20:37:54 GMTCVECVE-2026-55635: DataEase: Authenticated SQL Injection in Chart Quota Filtershttps://agentprime.io/advisories/CVE-2026-55635/https://agentprime.io/advisories/CVE-2026-55635/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jul 2026 20:35:43 GMTCVECVE-2026-57172: DataEase: Hardcoded JWT Signing Secret in ShareLinkhttps://agentprime.io/advisories/CVE-2026-57172/https://agentprime.io/advisories/CVE-2026-57172/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jul 2026 20:33:26 GMTCVECVE-2026-53751: DataEase: H2 JDBC URL Filter Bypass Leads to Remote Code Execution (RCE)https://agentprime.io/advisories/CVE-2026-53751/https://agentprime.io/advisories/CVE-2026-53751/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jul 2026 20:31:12 GMTCVECVE-2026-53730: DataEase: Unauthorized Access to Engine Database via previewSql Endpointhttps://agentprime.io/advisories/CVE-2026-53730/https://agentprime.io/advisories/CVE-2026-53730/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jul 2026 20:29:19 GMTCVECVE-2026-55633: DataEase H2 RCE via Zip Protocol & File Dropper Fix bypasshttps://agentprime.io/advisories/CVE-2026-55633/https://agentprime.io/advisories/CVE-2026-55633/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jul 2026 20:27:28 GMTCVECVE-2026-55631: DataEase: Path Traversal Leading to Arbitrary File Deletion via Font Managementhttps://agentprime.io/advisories/CVE-2026-55631/https://agentprime.io/advisories/CVE-2026-55631/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jul 2026 20:24:56 GMTCVECVE-2026-53729: DataEase ExportCenter IDOR allows cross-user export task accesshttps://agentprime.io/advisories/CVE-2026-53729/https://agentprime.io/advisories/CVE-2026-53729/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jul 2026 20:23:08 GMTCVECVE-2026-8724: Dataease Data Dashboard SqlparserUtils.java SqlparserUtils.transFilter sql injectionhttps://agentprime.io/advisories/CVE-2026-8724/https://agentprime.io/advisories/CVE-2026-8724/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 17 May 2026 00:30:10 GMTCVECVE-2026-40901: DataEase: Quartz Deserialization → Remote Code Executionhttps://agentprime.io/advisories/CVE-2026-40901/https://agentprime.io/advisories/CVE-2026-40901/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 Apr 2026 20:57:45 GMTCVECVE-2026-40900: DataEase has SQL Injection via Stacked Querieshttps://agentprime.io/advisories/CVE-2026-40900/https://agentprime.io/advisories/CVE-2026-40900/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 Apr 2026 20:53:27 GMTCVECVE-2026-40899: DataEase has an Arbitrary File Read Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-40899/https://agentprime.io/advisories/CVE-2026-40899/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 Apr 2026 19:48:44 GMTCVECVE-2026-33207: DataEase SQL Injection Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-33207/https://agentprime.io/advisories/CVE-2026-33207/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 Apr 2026 19:37:36 GMTCVECVE-2026-33122: DataEase has SQL Injection via Datasource Managementhttps://agentprime.io/advisories/CVE-2026-33122/https://agentprime.io/advisories/CVE-2026-33122/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 Apr 2026 19:24:03 GMTCVECVE-2026-33121: DataEase has SQL Injection via Datasource Save Flowhttps://agentprime.io/advisories/CVE-2026-33121/https://agentprime.io/advisories/CVE-2026-33121/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 Apr 2026 18:16:02 GMTCVECVE-2026-33084: DataEase has SQL Injection through its getFieldEnumObj Endpointhttps://agentprime.io/advisories/CVE-2026-33084/https://agentprime.io/advisories/CVE-2026-33084/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 Apr 2026 18:14:07 GMTCVECVE-2026-33083: DataEase has SQL Injection in Order By Clausehttps://agentprime.io/advisories/CVE-2026-33083/https://agentprime.io/advisories/CVE-2026-33083/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 Apr 2026 17:52:37 GMTCVECVE-2026-33082: DataEase: SQL Injection in v2 Dataset Exporthttps://agentprime.io/advisories/CVE-2026-33082/https://agentprime.io/advisories/CVE-2026-33082/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 Apr 2026 17:39:37 GMTCVECVE-2026-32939: DataEase is Vulnerable to H2 JDBC RCE Bypasshttps://agentprime.io/advisories/CVE-2026-32939/https://agentprime.io/advisories/CVE-2026-32939/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 Mar 2026 03:27:46 GMTCVECVE-2026-32140: Dataease: Redshift JDBC RCE Bypasshttps://agentprime.io/advisories/CVE-2026-32140/https://agentprime.io/advisories/CVE-2026-32140/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 12 Mar 2026 18:04:49 GMTCVEcriticalCVE-2026-32139: Dataease: Unfiltered active SVG content leads to Stored XSShttps://agentprime.io/advisories/CVE-2026-32139/https://agentprime.io/advisories/CVE-2026-32139/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 12 Mar 2026 17:57:32 GMTCVECVE-2026-32137: DataEase SQL Injection Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-32137/https://agentprime.io/advisories/CVE-2026-32137/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 12 Mar 2026 17:53:00 GMTCVEcriticalCVE-2026-23958: DataEase Vulnerable to Brute-Force Attack on Admin JWT Secret Derived from Password that Enables Full Account Takeoverhttps://agentprime.io/advisories/CVE-2026-23958/https://agentprime.io/advisories/CVE-2026-23958/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Jan 2026 01:42:11 GMTCVECVE-2025-64428: DataEase DB2 JNDI Vulnerabilityhttps://agentprime.io/advisories/CVE-2025-64428/https://agentprime.io/advisories/CVE-2025-64428/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Nov 2025 17:07:00 GMTCVECVE-2025-64164: DataEase is vulnerable to Oracle JNDI Injectionhttps://agentprime.io/advisories/CVE-2025-64164/https://agentprime.io/advisories/CVE-2025-64164/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Nov 2025 00:07:58 GMTCVECVE-2025-64163: DataEase's DB2 is vulnerable to SSRFhttps://agentprime.io/advisories/CVE-2025-64163/https://agentprime.io/advisories/CVE-2025-64163/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Nov 2025 23:52:05 GMTCVECVE-2025-62419: DataEase vulnerable to JDBC URL injection in DB2 and MongoDB data source configurationhttps://agentprime.io/advisories/CVE-2025-62419/https://agentprime.io/advisories/CVE-2025-62419/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Oct 2025 17:11:21 GMTCVE