File and Path Handling

Every one of the 13 is a mark on the map. Named now: 1 to 13, most at risk first.

1. DataEase v1.11.1 was discovered to contain a arbitrary file write vulnerability via the parameter dataSourceId.CVE-2022-34115Dataease · 1.2% likely

   CWE-434

2. A directory Traversal vulnerability in DataEase before 1.18.10 allows a remote attacker to obtain sensitive information via a a crafted request to the StaticResourceController.jav…CVE-2023-40772DataEase · CVSS 4.3 · 0.9% likely

   CWE-23

3. DataEase H2 RCE via Zip Protocol & File Dropper Fix bypassCVE-2026-55633dataease · CVSS 8.7 · 0.8% likely

   CWE-434

4. Dataease: Redshift JDBC RCE BypassCVE-2026-32140dataease · CVSS 9.3 · 0.8% likely

   CWE-22

5. DataEase has a vulnerability to obtain user cookiesCVE-2023-40183dataease · CVSS 7.5 · 0.8% likely

   CWE-434

6. DataEase: Remote Code Execution (RCE) via Zip Protocol & File DropperCVE-2026-50124dataease · CVSS 7.1 · 0.6% likely

   CWE-434

7. DataEase has a Path Traversal VulnerabilityCVE-2026-45532dataease · CVSS 8.7 · 0.5% likely

   CWE-22

8. DataEase Authentication Filter WhitelistUtils.java WhitelistUtils.endsWithAny unrestricted uploadCVE-2026-123991Dataease · CVSS 7.3 · 0.5% likely

   CWE-434

9. DataEase: Path Traversal Leading to Arbitrary File Deletion via Font ManagementCVE-2026-55631dataease · CVSS 7.2 · 0.5% likely

   CWE-22

10. DataEase: Path Traversal VulnerabilityCVE-2026-45533dataease · CVSS 8.3 · 0.5% likely

    CWE-22

11. DataEase: Arbitrary File Write VulnerabilityCVE-2026-45419dataease · CVSS 8.5 · 0.5% likely

    CWE-22

12. SQLBot through 1.10.3 Path Traversal via datasource importToDb EndpointCVE-2026-121453dataease · CVSS 2.7 · 0.4% likely

    CWE-22

13. SQLBot: Arbitrary File Write via parseExcel Leading to Code Execution Through Alembic Import ProcessingCVE-2026-53554dataease · CVSS 7.3 · 0.4% likely

    CWE-22

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.