Vendors / diaowen Records 9 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 1
Exploited now diaowen records in CISA KEV No diaowen vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
File Upload vulnerability in DWSurvey DWSurvey-OSS v.3.2.0 and before allows a remote attacker to execute arbitrary code via the saveimage method and savveFile in the action/UploadAction.java file.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01273 · Published 2023-09-01 · No fix listed CWE-434
Priority HIGH 72
DWSurvey 6.14.0 is vulnerable to Incorrect Access Control.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00316 · Published 2025-11-05 · No fix listed CWE-639
Priority MEDIUM 57
A vulnerability was determined in diaowen DWSurvey up to 6.14.0.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00347 · Published 2026-08-04 · No fix listed CWE-266
Priority MEDIUM 57
A vulnerability was found in diaowen DWSurvey up to 6.14.0.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00365 · Published 2026-08-04 · No fix listed CWE-285
Priority MEDIUM 48
DWSurvey v3.2.0 was discovered to contain a remote command execution (RCE) vulnerability via the component /sysuser/SysPropertyAction.java.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03067 · Published 2022-03-20 · No fix listed CWE-94
Priority MEDIUM 44
DWSurvey v3.2.0 was discovered to contain an arbitrary file write vulnerability via the component /utils/ToHtmlServlet.java.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01214 · Published 2022-03-20 · No fix listed CWE-434
Priority LOW 29
DWSurvey through 2019-07-22 has reflected XSS via the design/qu-multi-fillblank!answers.action surveyId parameter.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00873 · Published 2019-08-16 · No fix listed CWE-79
Priority LOW 29
DWSurvey through 2019-07-22 has stored XSS via the design/my-survey-design!copySurvey.action surveyName parameter.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00788 · Published 2019-08-07 · No fix listed CWE-79
Priority LOW 28
Cross Site Scripting vulnerability found in wkeyuan DWSurvey 1.0 allows a remote attacker to execute arbitrary code via thequltemld parameter of the qu-multi-fillblank!answers.action file.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00565 · Published 2023-06-20 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
3 1 5 0 0
THREATIST.IORead the docs