Vulnerabilities

TI-2025-14133 CVE-2025-15494 · GHSA-6c7p-3rhg-7wgj

RainyGao DocSys UserMapper.xml sql injection

MEDIUM 57

A vulnerability has been found in RainyGao DocSys up to 2.02.37.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0042 Published 2026-01-09 No fix listed CWE-74

TI-2025-14132 CVE-2025-15493 · GHSA-rg37-qjm5-vw5p

MEDIUM 57

A flaw has been found in RainyGao DocSys up to 2.02.36.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00439 Published 2026-01-09 No fix listed CWE-74

TI-2025-14131 CVE-2025-15492 · GHSA-xg8w-4mgh-rwxq

MEDIUM 57

A vulnerability was detected in RainyGao DocSys up to 2.02.36.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0042 Published 2026-01-09 No fix listed CWE-74

TI-2025-10661 CVE-2025-11631 · GHSA-jwwr-9265-56jg

MEDIUM 57

A vulnerability was determined in RainyGao DocSys up to 2.02.36.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00822 Published 2025-10-12 No fix listed CWE-22

TI-2025-10660 CVE-2025-11630 · GHSA-vmvw-crp8-v2g3

MEDIUM 57

A vulnerability was found in RainyGao DocSys up to 2.02.36.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00734 Published 2025-10-12 No fix listed CWE-22

TI-2025-10659 CVE-2025-11629 · GHSA-8g82-vmv5-qwpw

MEDIUM 57

A vulnerability has been found in RainyGao DocSys up to 2.02.36.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00422 Published 2025-10-12 No fix listed CWE-74

TI-2022-04124 CVE-2022-4511 · GHSA-792c-8mr7-jjvh

HIGH 72

A vulnerability has been found in RainyGao DocSys and classified as critical.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00835 Published 2022-12-15 No fix listed CWE-22

TI-2022-04030 CVE-2022-4402 · GHSA-6x8q-mcvj-v6v9

LOW 33

A vulnerability classified as critical has been found in RainyGao DocSys 2.02.37.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00783 Published 2022-12-11 No fix listed CWE-22