datax-web project records
5 published records for vendor datax-web project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-266 Incorrect Privilege Assignment1
- CWE-502 Deserialization of Untrusted Data1
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
42Plan | CVE-2023-7116Proof of concept | WeiYe-Jing datax-web HTTP POST Request killJob os command injectiondatax-web project · datax-web · CWE-78 | Critical9.8 | — | 9.8% | Dec 27, 2023 |
40Plan | CVE-2022-46478No exploit | The RPC interface in datax-web v1.0.0 and v2.0.0 to v2.1.2 contains no permission checks by default which allows attackers to execute arbitrdatax-web project · datax-web · CWE-502 | Critical9.8 | — | 2.0% | Jan 12, 2023 |
23Monitor | CVE-2024-12358No exploit | WeiYe-Jing datax-web add os command injectiondatax-web project · datax-web · CWE-77 | Medium5.3 | — | 5.1% | Dec 9, 2024 |
8Monitor | CVE-2025-13250No exploit | WeiYe-Jing datax-web Job triggerJob access controldatax-web project · datax-web · CWE-266 | Low2.1 | — | 0.4% | Nov 16, 2025 |
8Monitor | CVE-2025-13251No exploit | WeiYe-Jing datax-web sql injectiondatax-web project · datax-web · CWE-74 | Low2.1 | — | 0.3% | Nov 16, 2025 |
- CVE-2023-711642Plan
WeiYe-Jing datax-web HTTP POST Request killJob os command injection
CriticalCVSS 9.8Proof of conceptEPSS 9%datax-web project · datax-webDec 27, 2023
- CVE-2022-4647840Plan
The RPC interface in datax-web v1.0.0 and v2.0.0 to v2.1.2 contains no permission checks by default which allows attackers to execute arbitr
CriticalCVSS 9.8No exploitEPSS 2%datax-web project · datax-webJan 12, 2023
- CVE-2024-1235823Monitor
WeiYe-Jing datax-web add os command injection
MediumCVSS 5.3No exploitEPSS 5%datax-web project · datax-webDec 9, 2024
- CVE-2025-132508Monitor
WeiYe-Jing datax-web Job triggerJob access control
LowCVSS 2.1No exploitEPSS 0%datax-web project · datax-webNov 16, 2025
- CVE-2025-132518Monitor
WeiYe-Jing datax-web sql injection
LowCVSS 2.1No exploitEPSS 0%datax-web project · datax-webNov 16, 2025