Vendors / cjbi Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now cjbi records in CISA KEV No cjbi vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 73
admin3 through 3.0.0 persists user session tokens in the audit log event body when publishing UserLoggedIn domain events.
CVSS 4.0 HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00648 · Published 2026-09-17 · No fix listed CWE-532
Priority HIGH 65
admin3 through 3.0.0 fails to sanitize client-supplied filenames in the upload handler, allowing authenticated users to write files outside the storage root on Windows deployments.
CVSS 4.0 HIGH 7.2· Network · Low privileges · No interaction · EPSS 0.00584 · Published 2026-09-17 · No fix listed CWE-22
Priority MEDIUM 64
admin3 through 3.0.0 stores account passwords using single-round MD5 with only the username as salt and no key derivation function.
CVSS 4.0 MEDIUM 6.9· Network · High privileges · No interaction · EPSS 0.00301 · Published 2026-09-17 · No fix listed CWE-916
Priority MEDIUM 57
admin3 through 3.0.0 fails to invalidate existing sessions when disabling a user account, allowing attackers to retain authenticated access with original permissions.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0032 · Published 2026-09-17 · No fix listed CWE-613
Priority MEDIUM 57
A vulnerability was found in cjbi wetech-cms 1.0/1.1/1.2.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0098 · Published 2024-12-11 · No fix listed CWE-23
Priority MEDIUM 57
A vulnerability was found in cjbi wetech-cms 1.0/1.1/1.2.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00602 · Published 2024-12-11 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability was found in cjbi wetech-cms 1.0/1.1/1.2.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00563 · Published 2024-12-11 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability was found in cjbi wetech-cms 1.0/1.1/1.2 and classified as critical.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00602 · Published 2024-12-11 · No fix listed CWE-74
Open these records in search → All records by CVSS severity
0 2 6 0 0
THREATIST.IORead the docs