Vendors / Jeewms Records 9 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 2
Exploited now Jeewms records in CISA KEV No Jeewms vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
JeeWMS 771e4f5d0c01ffdeae1671be4cf102b73a3fe644 (2025-05-19) contains incorrect authentication bypass vulnerability, which can lead to arbitrary file reading.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00441 · Published 2025-08-20 · No fix listed CWE-287
Priority HIGH 82
Jeewms v3.7 was discovered to contain a SQL injection vulnerability via the CgReportController API.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00531 · Published 2025-08-22 · No fix listed CWE-89
Priority HIGH 82
An issue in Jeewms v.3.7 and before allows a remote attacker to escalate privileges via the AuthInterceptor component.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00969 · Published 2024-03-05 · No fix listed CWE-27
Priority HIGH 70
A vulnerability has been found in erzhongxmu JEEWMS 3.7.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.004 · Published 2026-02-23 · No fix listed CWE-918
Priority HIGH 66
A zip slip vulnerability in the component \service\migrate\MigrateForm.java of JEEWMS v3.7 allows attackers to execute arbitrary code via a crafted Zip file.
CVSS 3.1 MEDIUM 5.5· Network · Low privileges · User interaction · EPSS 0.00357 · Published 2025-04-15 · No fix listed CWE-22
Priority HIGH 66
Directory Traversal vulnerability in Jeewms v.3.7 and before allows a remote attacker to obtain sensitive information via the cgformTemplateController component.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00879 · Published 2024-03-05 · No fix listed CWE-22
Priority MEDIUM 57
A vulnerability was found in erzhongxmu JEEWMS up to 3.7.
CVSS 4.0 MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00344 · Published 2026-02-23 · No fix listed CWE-79
Priority LOW 37
JeeWMS before v2025.01.01 was discovered to contain a SQL injection vulnerability via the ReportId parameter at /core/CGReportDao.java.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00371 · Published 2025-01-14 · No fix listed CWE-89
Priority LOW 35
JeeWMS before v2025.01.01 was discovered to contain a permission bypass in the component /interceptors/AuthInterceptor.cava.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00413 · Published 2025-01-14 · No fix listed CWE-862
Open these records in search → All records by CVSS severity
3 2 4 0 0
THREATIST.IORead the docs