CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It affects Oracle, Java. Public exploit code or proof-of-concept references have been detected in its references.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
GitHub PoC Links
Note: these links are listed for security research and verification purposes only.
CVE
CVE-2025-64164
Severity
CRITICAL
CVSS
9.8
EPSS
0.58%
Oracle Java
Original NVD Description
Dataease is an open source data visualization analysis tool. In versions 2.10.14 and below, DataEase did not properly filter when establishing JDBC connections to Oracle, resulting in a risk of JNDI injection (Java Naming and Directory Interface injection). This issue is fixed in version 2.10.15.
Related CVEs
Other vulnerabilities affecting the same vendor(s)