CVE-2022-23331: Dataease

High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days.

In DataEase v1.6.1, an authenticated user can gain unauthorized access to all user information and can change the administrator password.

Affected products

• Dataease Dataease: version 1.6.1 only

Published 2022-02-08. Last modified 2026-06-17.