Priority HIGH 80
JEEWMS 20250820 is vulnerable to SQL Injection in the exportXls function located in the src/main/java/org/jeecgframework/web/cgreport/controller/excel/CgExportExcelController.java file.
CVSS 3.1CRITICAL 9.4· Network · No auth · No interaction · EPSS 0.00328 · Published 2025-10-10 · No fix listed CWE-89
Priority HIGH 70
A vulnerability classified as critical was found in Guangzhou Huayi Intelligent Technology Jeewms up to 20241229.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.0084 · Published 2025-01-11 · No fix listed CWE-23
Priority HIGH 70
An arbitrary file upload vulnerability in the parserXML() method of JeeWMS before v2025.01.01 allows attackers to execute arbitrary code via uploading a crafted file.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00488 · Published 2025-01-14 · No fix listed CWE-434
Priority MEDIUM 64
A vulnerability was found in Guangzhou Huayi Intelligent Technology Jeewms up to 1.0.0 and classified as critical.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00616 · Published 2024-12-08 · No fix listed CWE-266
Priority MEDIUM 62
An arbitrary file upload vulnerability exists in JeeWMS 20250820, which is caused by the lack of file checking in the saveFiles function in /jeewms/cgUploadController.do.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00361 · Published 2025-10-10 · No fix listed CWE-77
Priority MEDIUM 60
A Cross Site Scripting vulnerability in JeeWMS v.3.7 and before allows a remote attacker to obtain sensitive information via the logController.do component
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00327 · Published 2025-09-16 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability was determined in erzhongxmu JEEWMS up to 3.7.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00367 · Published 2026-02-23 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability, which was classified as critical, was found in Guangzhou Huayi Intelligent Technology Jeewms up to 20241229.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00682 · Published 2025-01-11 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability, which was classified as critical, has been found in Guangzhou Huayi Intelligent Technology Jeewms up to 20241229.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00546 · Published 2025-01-11 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability was found in erzhongxmu Jeewms up to 20241108.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00533 · Published 2024-11-15 · No fix listed CWE-74
Priority LOW 38
A vulnerability was found in Guangzhou Huayi Intelligent Technology Jeewms 3.7.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.0087 · Published 2024-11-28 · No fix listed CWE-200
Priority LOW 34
JEEWMS 1.0 is vulnerable to SQL Injection.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00239 · Published 2026-02-03 · No fix listed CWE-89
Priority LOW 25
A vulnerability was found in JeeWMS up to 20250504.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00514 · Published 2025-05-31 · No fix listed CWE-22
Priority LOW 24
A vulnerability, which was classified as critical, was found in JeeWMS up to 20250504.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00337 · Published 2025-05-31 · No fix listed CWE-266
Priority LOW 24
A vulnerability, which was classified as critical, has been found in JeeWMS up to 20250504.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00362 · Published 2025-05-31 · No fix listed CWE-266
Priority LOW 24
A vulnerability classified as critical was found in JeeWMS up to 20250504.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00379 · Published 2025-05-31 · No fix listed CWE-74
Priority LOW 24
A vulnerability classified as critical has been found in JeeWMS up to 20250504.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00362 · Published 2025-05-31 · No fix listed CWE-266
Priority LOW 24
A vulnerability was found in JeeWMS up to 20250504.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00353 · Published 2025-05-31 · No fix listed CWE-74
Priority LOW 24
A vulnerability was found in JeeWMS up to 20250504.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00353 · Published 2025-05-31 · No fix listed CWE-74
THREATIST.IORead the docs