Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: ketr Clear all filters
TI-2025-13416 CVE-2025-14694 · GHSA-2gxm-4cm6-2hf9

ketr JEPaaS readAllPostil sql injection

Priority MEDIUM 56

A vulnerability was found in ketr JEPaaS up to 7.2.8.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.0024 Published 2025-12-15 No fix listed CWE-74
TI-2025-12873 CVE-2025-14088 · GHSA-rxrg-39vh-ch96

ketr JEPaaS load improper authorization

Priority MEDIUM 57

A vulnerability was determined in ketr JEPaaS up to 7.2.8.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0026 Published 2025-12-05 No fix listed CWE-266
TI-2024-34268 CVE-2024-51165 · GHSA-w6fv-cg9x-p5jx

SQL injection vulnerability in JEPAAS7.2.8, via /je/rbac/rbac/loadLoginCount in the…

Priority HIGH 72

SQL injection vulnerability in JEPAAS7.2.8, via /je/rbac/rbac/loadLoginCount in the dateVal parameter, which could allow a remote user to submit a specially crafted query, allowing an attacker to retrieve all the informa…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00599 Published 2024-12-10 No fix listed CWE-89
TI-2024-34267 CVE-2024-51164 · GHSA-7q82-fxvh-gf2x

Multiple parameters have SQL injection vulnerability in JEPaaS 7.2.8 via…

Priority MEDIUM 47

Multiple parameters have SQL injection vulnerability in JEPaaS 7.2.8 via /je/login/btnLog/insertBtnLog, which could allow a remote user to submit a specially crafted query, allowing an attacker to retrieve all the inform…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00747 Published 2024-11-15 No fix listed CWE-89