CWE-153 · Injection and Smuggling
Improper Neutralization of Substitution Characters
5CVEs
SortMost likely exploited
5 CVEs with CWE-153 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2025-49003Dataease H2 JDBC Connection Remote Code Executiondataease · dataease · CVSS 8.9 · 2025-06-26 | 8.9 | 0.9% | 2025-06-26 |
| CVE-2025-53006Dataease PostgreSQL & Redshift Data Source JDBC Connection Parameters Bypass Vulnerabilitydataease · dataease · CVSS 8.9 · 2025-07-02 | 8.9 | 0.6% | 2025-07-02 |
| CVE-2025-53005Dataease PostgreSQL Data Source JDBC Connection Parameters Bypass Vulnerabilitydataease · dataease · CVSS 8.9 · 2025-07-01 | 8.9 | 0.6% | 2025-07-01 |
| CVE-2025-53004Dataease Redshift Data Source JDBC Connection Parameters Bypass Vulnerabilitydataease · dataease · CVSS 8.9 · 2025-06-30 | 8.9 | 0.6% | 2025-06-30 |
| CVE-2026-9694Improper Neutralization of Substitution Characters in GitLabGitLab · GitLab · CVSS 2.6 · 2026-06-11 | 2.6 | 0.2% | 2026-06-11 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.