Jrecms

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Jrecms records in CISA KEV

No Jrecms vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Springbootcms · all components

TI-2022-03922 CVE-2022-4282 · GHSA-j9jm-9v86-98jx

HIGH 65

A vulnerability was found in SpringBootCMS and classified as critical.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00747 Published 2022-12-05 No fix listed CWE-707

TI-2024-06063 CVE-2024-6539 · GHSA-57wx-64w4-pwjp

MEDIUM 57

A vulnerability classified as problematic has been found in heyewei SpringBootCMS up to 2024-05-28.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00342 Published 2024-07-07 No fix listed CWE-79

TI-2023-23126 CVE-2023-43192 · GHSA-q396-xfjm-r6q8

MEDIUM 42

SQL injection can exist in a newly created part of the SpringbootCMS 1.0 background, and the parameters submitted by users are not filtered.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00894 Published 2023-09-27 No fix listed CWE-89

TI-2023-23125 CVE-2023-43191 · GHSA-4x5j-8hmf-vgjf

LOW 25

SpringbootCMS 1.0 foreground message can be embedded malicious code saved in the database.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00405 Published 2023-09-27 No fix listed CWE-79