Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: ketr Component: Jepaas Clear all filters
TI-2024-34268 CVE-2024-51165 · GHSA-w6fv-cg9x-p5jx

SQL injection vulnerability in JEPAAS7.2.8, via /je/rbac/rbac/loadLoginCount in the…

Priority HIGH 72

SQL injection vulnerability in JEPAAS7.2.8, via /je/rbac/rbac/loadLoginCount in the dateVal parameter, which could allow a remote user to submit a specially crafted query, allowing an attacker to retrieve all the informa…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00599 Published 2024-12-10 No fix listed CWE-89
TI-2024-34267 CVE-2024-51164 · GHSA-7q82-fxvh-gf2x

Multiple parameters have SQL injection vulnerability in JEPaaS 7.2.8 via…

Priority MEDIUM 47

Multiple parameters have SQL injection vulnerability in JEPaaS 7.2.8 via /je/login/btnLog/insertBtnLog, which could allow a remote user to submit a specially crafted query, allowing an attacker to retrieve all the inform…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00747 Published 2024-11-15 No fix listed CWE-89