Vulnerabilities

TI-2021-22766 CVE-2021-48015 · GHSA-86qh-69c7-wj92

Path traversal in JeeWMS lets unauthenticated attackers read files

HIGH 77

JeeWMS before commit 0a610e8 contains an unauthenticated path traversal vulnerability that allows remote attackers to read arbitrary files via the dbPath parameter.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00563 Published 2026-10-22 Fixed CWE-22

TI-2026-70817 CVE-2026-108782 · GHSA-773r-fc25-xg9p

SQL injection in erzhongxmu JEEWMS autocomplete handler

MEDIUM 57

A weakness has been identified in erzhongxmu JEEWMS up to 2026.09.27-W39.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00192 Published 2026-10-12 No fix listed CWE-74

TI-2026-70812 CVE-2026-108781 · GHSA-mcrh-cw8w-39qp

SQL injection in erzhongxmu JEEWMS PDA interface

MEDIUM 57

A security flaw has been discovered in erzhongxmu JEEWMS up to 2026.09.27-W39.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00237 Published 2026-10-12 No fix listed CWE-74

TI-2026-70811 CVE-2026-108779 · GHSA-4mf5-cv4x-v6qh

SQL injection in erzhongxmu JEEWMS WmSttInGoodsController.list

LOW 23

A vulnerability was identified in erzhongxmu JEEWMS up to 2026.09.27-W39.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00192 Published 2026-10-12 No fix listed CWE-74

TI-2026-70810 CVE-2026-108778 · GHSA-rr5m-w4c2-x5h4

SQL injection in JEEWMS inbound quality check PDA interface

LOW 23

A vulnerability was determined in erzhongxmu JEEWMS up to 2026.09.27-W39.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00192 Published 2026-10-11 No fix listed CWE-74

TI-2026-70809 CVE-2026-108777 · GHSA-j7j5-hcmh-jmmq

SQL injection in erzhongxmu JEEWMS WvGiController list function

MEDIUM 57

A vulnerability was found in erzhongxmu JEEWMS up to 2026.09.27-W39.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00192 Published 2026-10-11 No fix listed CWE-74

TI-2026-70808 CVE-2026-108775 · GHSA-gjf5-vwv7-jrqm

SQL injection in erzhongxmu JEEWMS search endpoint

MEDIUM 57

A vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W39.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00233 Published 2026-10-11 No fix listed CWE-74

TI-2026-70807 CVE-2026-108774 · GHSA-9rp9-99xw-q98h

SQL injection in erzhongxmu JEEWMS MdBinController getbinallagv

LOW 23

A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00192 Published 2026-10-11 No fix listed CWE-74

TI-2026-70806 CVE-2026-108773 · GHSA-jwm3-mwmj-5jwp

SQL injection in erzhongxmu JEEWMS notice controller docheck

LOW 23

A vulnerability was detected in erzhongxmu JEEWMS up to 2026.09.27-W39.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00192 Published 2026-10-11 No fix listed CWE-74

TI-2026-70667 CVE-2026-108684 · GHSA-6m96-h9v3-q5rx

SQL injection in erzhongxmu Jeewms Autocomplete Data handler

MEDIUM 57

A vulnerability was detected in erzhongxmu Jeewms up to 3.7.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00256 Published 2026-10-11 No fix listed CWE-74

TI-2026-09887 CVE-2026-11458 · GHSA-f5ww-rmh9-9wmc

erzhongxmu JeeWMS Boot Actuator Endpoint actuator information disclosure

HIGH 70

A weakness has been identified in erzhongxmu JeeWMS up to 141740afb2ba14d441c82a833d0a418d07ca2d69.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00292 Published 2026-06-07 No fix listed CWE-200

TI-2026-09886 CVE-2026-11457 · GHSA-2wr2-6xmq-jw4h

erzhongxmu JeeWMS JimuReport test-connection Endpoint testConnection injection

HIGH 70

A security flaw has been discovered in erzhongxmu JeeWMS up to 141740afb2ba14d441c82a833d0a418d07ca2d69.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00329 Published 2026-06-07 No fix listed CWE-707

Vulnerabilities

Filters