Dataease

dataease.io ↗
B
MODERATE
43
Total CVEs
34
Crit / High
8
Medium
5%
Unpatched
44%
Patched
8.0
Avg CVSS
0
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB How we collect data →
// INTEL UPGRADE
Full Company Dossier — Coming Soon
Executive profiles, financial exposure, M&A risk, breach history & supply-chain threat mapping — all in one place.
OSINT FINANCIALS EXEC PROFILES BREACH DB
▸ CVE Trend by Year
▸ Patch Coverage
Patched
44%
Unpatched
5%
Under Review
49%
Pending
2%
✓ 19 patched ✗ 2 unpatched ~ 21 under review ⏳ 1 pending score
▸ Intelligence by Audience
PoC Available
1 / 20 shown
CISA KEV (Exploited)
0
Shodan Dorks
ssl:"dataease" port:443
org:"Dataease" http.status:200
Top EPSS (Exploitation Probability)
CVE-2025-49002 50.27% exploitation probability
CVE-2025-57772 9.30% exploitation probability
CVE-2025-57773 8.27% exploitation probability
CVE-2025-58046 1.43% exploitation probability
CVE-2025-64163 1.16% exploitation probability
Quick Facts for Reporting
Total CVEs tracked
43
Critical severity
8
Actively exploited (CISA)
0
Unpatched ratio
5%
Avg CVSS score
8.0
Security grade
B (MODERATE)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-10-14
Security Risk Score (for investors)
LOW
Vuln Volume
GOOD
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
▸ Security News Google News
From Auth Bypass to RCE: A 4-Vulnerability Exploit Chain in DataEase - OX Security
OX Security 2026-05-25
▸ Recent CVEs showing 20 of 43
CVE IDSeverityPatchEPSSDate
CVE-2026-8724 5.1 MEDIUM UNKNOWN / UNPATCHED 0.39% 2026-05-17
CVE-2025-15598 6.3 MEDIUM UNKNOWN / UNPATCHED 0.18% 2026-03-03
CVE-2025-15597 5.3 MEDIUM PATCH UNDER REVIEW 0.55% 2026-03-02
CVE-2025-64428 8.9 HIGH PATCH UNDER REVIEW 0.58% 2025-11-20
CVE-2025-64164 8.9 HIGH PATCH UNDER REVIEW 0.63% 2025-11-06
CVE-2025-64163 8.9 HIGH PATCH UNDER REVIEW 1.16% 2025-11-05
CVE-2025-62419 8.2 HIGH PATCHED / FIX AVAILABLE 0.43% 2025-10-17
CVE-2025-62420 8.2 HIGH PATCHED / FIX AVAILABLE 1.00% 2025-10-17
CVE-2025-62421 5.5 MEDIUM PATCHED / FIX AVAILABLE 0.27% 2025-10-17
CVE-2025-62422 8.7 HIGH PATCH UNDER REVIEW 0.51% 2025-10-17
CVE-2025-58748 8.7 HIGH PATCH UNDER REVIEW 0.83% 2025-09-15
CVE-2025-58046 8.7 HIGH PATCH UNDER REVIEW 1.43% 2025-09-15
CVE-2025-58045 7.1 HIGH PATCHED / FIX AVAILABLE 0.69% 2025-09-15
CVE-2025-57772 8.2 HIGH PATCHED / FIX AVAILABLE 9.30% 2025-08-25
CVE-2025-57773 8.2 HIGH PATCHED / FIX AVAILABLE 8.27% 2025-08-25
CVE-2025-53006 8.9 HIGH PATCH UNDER REVIEW 0.62% 2025-07-02
CVE-2025-53005 8.9 HIGH PATCH UNDER REVIEW 0.60% 2025-07-01
CVE-2025-53004 8.9 HIGH PATCH UNDER REVIEW 0.60% 2025-06-30
CVE-2025-49003 8.9 HIGH PATCH UNDER REVIEW 0.93% 2025-06-26
CVE-2025-49002 PoC 8.2 HIGH PATCHED / FIX AVAILABLE 50.27% 2025-06-03
View all 43 CVEs for Dataease →
▸Intel
Trust ScoreB — MODERATE
Max CVSS9.8
Last Updated2026-10-14
▸Top Weaknesses
CWE-74
Unknown Weakness Type
2 occurrences in Dataease CVEs (5% of total)
CWE-74 ⓘ
2
CWE-94
Code Injection
1 occurrence in Dataease CVEs (2% of total)
CWE-94 ⓘ
1
CWE-89
SQL Injection
1 occurrence in Dataease CVEs (2% of total)
CWE-89 ⓘ
1
CWE-345
Unknown Weakness Type
1 occurrence in Dataease CVEs (2% of total)
CWE-345 ⓘ
1
CWE-611
XML External Entity (XXE)
1 occurrence in Dataease CVEs (2% of total)
CWE-611 ⓘ
1
CWE-502
Deserialization of Untrusted Data
1 occurrence in Dataease CVEs (2% of total)
CWE-502 ⓘ
1
CWE-306
Missing Authentication
1 occurrence in Dataease CVEs (2% of total)
CWE-306 ⓘ
1
CWE-266
Unknown Weakness Type
1 occurrence in Dataease CVEs (2% of total)
CWE-266 ⓘ
1
▸Company Profile

Dataease is a Chinese open-source business intelligence and data visualization platform that enables users to create dashboards and reports from various data sources. Its significance in cybersecurity stems from its widespread use in data-driven environments, where vulnerabilities in its software could expose sensitive analytical data. The vendor has 55 tracked CVEs, indicating a notable security focus.

▸Response Metrics
Est. MTTR ⓘ ~123 days (Poor)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ ↘ -89% better
CVE count 2026 vs 2025:  27 → 3 CVEs
Patch Speed ⓘ Excellent (<20% open)
5% of CVEs still unpatched.  Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
▸ Financial Risk Estimate
Est. GDPR Low
€122K
Est. GDPR High
€1.2M

Based on 8 critical CVEs, 0 CISA KEV, 7% unpatched. Model: GDPR Art.83 · not legal advice.

▸Actions
⚖ Compare with another vendor
▸Embed Badge
Dataease B valtersit.com