Read the docs

Jun-He Technology Ltd.

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Jun-He Technology Ltd. records in CISA KEV

No Jun-He Technology Ltd. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Enterprise Resource Planning Point Of Sale System 2 records LOW Omnidirectional Communication System 2 records LOW

Records

4 records

TI-2021-10713 CVE-2021-30173 · GHSA-m7c8-3qqc-3m6c

Jun-He Technology Ltd. Quan-Fang-Wei-Tong-Xun system - Local File Inclusion

Priority LOW 31

Local File Inclusion vulnerability of the omni-directional communication system allows remote authenticated attacker inject absolute path into Url parameter and access arbitrary file.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01237 Published 2021-05-07 No fix listed CWE-36
TI-2021-10712 CVE-2021-30172 · GHSA-p3vw-pmcf-8h54

Jun-He Technology Ltd. Quan-Fang-Wei-Tong-Xun system - Reflected XSS

Priority LOW 25

Special characters of picture preview page in the Quan-Fang-Wei-Tong-Xun system are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out Reflected XSS (Cr…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00586 Published 2021-05-07 No fix listed CWE-79
TI-2021-10711 CVE-2021-30171 · GHSA-9w75-p6x3-6qwp

Jun-He Technology Ltd. ERP POS - Stored XSS-2

Priority LOW 25

Special characters of ERP POS news page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS (Stored Cross-site scripting) attacks, additio…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00586 Published 2021-05-07 No fix listed CWE-79
TI-2021-10710 CVE-2021-30170 · GHSA-2q53-9g7q-p5mg

Jun-He Technology Ltd. ERP POS - Stored XSS-1

Priority LOW 25

Special characters of ERP POS customer profile page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS (Stored Cross-site scripting) atta…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00586 Published 2021-05-07 No fix listed CWE-79
Open these records in search →