'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>
 
   
 

web_app:dataease_h2_database_jdbc_rce（Rule ID：1070210485）

Release Date：2025/9/15

Rule Name：CVE-2025-32966,CVE-2025-49002:Dataease H2 Database JDBC Remote Code Execution Vulnerability

Severity：critical

CVE ID：CVE-2025-32966 CVE-2025-49002

 

Descripiton：

DataEase is an open source data visualization analysis tool developed by DataEase. It is used to help users quickly analyze data and gain insights into business trends, thereby improving and optimizing business. DataEase versions prior to 2.10.8 have a security vulnerability CVE-2025-32966, which originates from the backend JDBC link and may lead to remote code execution. CVE-2025-49002 uses case insensitivity to bypass the patch for CVE-2025-32966. This vulnerability has been fixed in Dataease v2.10.10. This rule supports to defend the A6: Vulnerabe and Outdated Components of OWASP Top 10 - 2021.
Other reference：None

 

Solution：

Update vendor patches.