Skip to content

Datalust · product

Seq

7 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

likely to be exploited
1

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

  1. Datalust Seq before 4.2.605 is vulnerable to Authentication Bypass (with the attacker obtaining admin access) via '"Name":"isauthenticationenabled","Value":false' in an api/settin…CVE-2018-8096Datalust · 48% likely

    CWE-287

  2. Datalust Seq before 2021.2.6259 allows users (with view filters applied to their accounts) to see query results not constrained by their view filter. This information exposure, ca…CVE-2021-41329Datalust · 1.0% likely

    CWE-682

  3. Datalust Seq before 2023.4.11151 and 2024 before 2024.1.11146 has Incorrect Access Control because a Project Owner or Organization Owner can escalate to System privileges.CVE-2024-29866Datalust · CVSS 9.1 · 0.7% likely

    CWE-284

  4. Datalust Seq before 2023.2.9489 allows insertion of sensitive information into an externally accessible file or directory. This is exploitable only when external (SQL Server or Po…CVE-2023-38195Datalust · 0.5% likely
  5. An issue was discovered in Datalust Seq before 2024.3.13545. Expansion of identifiers in message templates can be used to bypass the system "Event body limit bytes" setting, leadi…CVE-2025-27911Datalust · CVSS 6.5 · 0.4% likely

    CWE-770

  6. An issue was discovered in Datalust Seq before 2024.3.13545. An insecure default parsing depth limit allows stack consumption when parsing user-supplied queries containing deeply…CVE-2024-58102Datalust · CVSS 5.7 · 0.4% likely

    CWE-674

  7. An issue was discovered in Datalust Seq before 2024.3.13545. Missing Content-Type validation can lead to CSRF when (1) Entra ID or OpenID Connect authentication is in use and a us…CVE-2025-27912Datalust · CVSS 8.8 · 0.2% likely

    CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.