CVE-2025-64164 – DataEase is vulnerable to Oracle JNDI Injection

CVE ID : CVE-2025-64164

Published : Nov. 6, 2025, 12:07 a.m. | 1 hour, 21 minutes ago

Description : Dataease is an open source data visualization analysis tool. In versions 2.10.14 and below, DataEase did not properly filter when establishing JDBC connections to Oracle, resulting in a risk of JNDI injection (Java Naming and Directory Interface injection). This issue is fixed in version 2.10.15.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…