Advisories · Technology

datagear.

Every CVE that names datagear among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-92566 CVE record

CVSS 8.8 High

DataGear through 6.0.0 Unauthenticated SSRF via HTTP Dataset Preview
- datagear
- Server-side request forgery (SSRF)
Not analysed yet 16 Sept 2026
CVE-2026-19110 CVE record

CVSS 4.8 Medium

DataGear Chart Name HtmlTplDashboardWidgetHtmlRenderer.java HtmlTplDashboardWidgetHtmlRenderer cross site scripting
- DataGear
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 6 Aug 2026
CVE-2023-7299 CVE record

CVSS 5.3 Medium

DataGear resolveSql sql injection
- DataGear
- Other injection
- SQL injection
Not analysed yet 23 Nov 2024
CVE-2024-7552 CVE record

CVSS 5.3 Medium

DataGear Data Schema Page ConversionSqlParamValueMapper.java evaluateVariableExpression expression language injection
- DataGear
- Code injection
Not analysed yet 6 Aug 2024
CVE-2023-2042 CVE record

CVSS 5.3 Medium

DataGear JDBC Server deserialization
- DataGear
- Insecure deserialization
Not analysed yet 14 Apr 2023
CVE-2023-1772 CVE record

CVSS 3.5 Low

DataGear Diagram Type cross site scripting
- DataGear
- Cross-site scripting (XSS)
Not analysed yet 31 Mar 2023
CVE-2023-1573 CVE record

CVSS 3.5 Low

DataGear Graph Dataset cross site scripting
- DataGear
- Cross-site scripting (XSS)
Not analysed yet 22 Mar 2023
CVE-2023-1571 CVE record

CVSS 6.3 Medium

DataGear pagingQueryData sql injection
- DataGear
- SQL injection
Not analysed yet 22 Mar 2023
CVE-2023-1572 CVE record

CVSS 2.0 Low

DataGear Plugin cross site scripting
- DataGear
- Cross-site scripting (XSS)
Not analysed yet 22 Mar 2023