Datagear

9 CVEs across 1 Datagear products. Browse Datagear vulnerabilities, severities, and proof-of-concept exploits.

Datagear products with known CVEs

ProductCVEs
Datagear9
Datagear CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-65792Critical9.12025-12-10DataGear v5.5.0 is vulnerable to Arbitrary File Deletion.
CVE-2023-7299Medium6.32024-11-23A vulnerability was found in DataGear up to 4.60. It has been declared as critical. This vulnerability affects unknown code of the file /dataSet/resolveSql. Th…
CVE-2024-7552Medium6.32024-08-06A vulnerability was found in DataGear up to 5.0.0. It has been declared as critical. Affected by this vulnerability is the function evaluateVariableExpression…
CVE-2024-37759Critical9.82024-06-24DataGear v5.0.0 and earlier was discovered to contain a SpEL (Spring Expression Language) expression injection vulnerability via the Data Viewing interface.
CVE-2023-2042Medium6.32023-04-14A vulnerability, which was classified as problematic, has been found in DataGear up to 4.7.0/5.1.0. Affected by this issue is some unknown functionality of the…
CVE-2023-1772Low3.52023-03-31A vulnerability was found in DataGear up to 4.5.1. It has been classified as problematic. This affects an unknown part of the component Diagram Type Handler. T…
CVE-2023-1573Low3.52023-03-22A vulnerability was found in DataGear up to 1.11.1 and classified as problematic. This issue affects some unknown processing of the component Graph Dataset Han…
CVE-2023-1571Medium6.32023-03-22A vulnerability, which was classified as critical, was found in DataGear up to 4.5.0. This affects an unknown part of the file /analysisProject/pagingQueryData…
CVE-2023-1572Low2.02023-03-22A vulnerability has been found in DataGear up to 1.11.1 and classified as problematic. This vulnerability affects unknown code of the component Plugin Handler…