Priority MEDIUM 57
A vulnerability was identified in PowerJob up to 5.1.2.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00348 · Published 2025-12-11 · No fix listed CWE-918
Priority MEDIUM 64
A security vulnerability has been detected in PowerJob up to 5.1.2.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00458 · Published 2025-10-10 · No fix listed CWE-862
Priority HIGH 70
A weakness has been identified in PowerJob up to 5.1.2.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.0109 · Published 2025-10-10 · No fix listed CWE-862
Priority MEDIUM 49
Powerjob >= 3.20 is vulnerable to SQL injection via the version parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00421 · Published 2024-11-11 · No fix listed CWE-89
Priority MEDIUM 41
An incorrect access control vulnerability in powerjob 4.3.2 and earlier allows remote attackers to obtain sensitive information via the interface for querying via appId parameter to /container/list.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00912 · Published 2023-08-17 · No fix listed CWE-284
Priority HIGH 82
PowerJob v4.3.3 was discovered to contain a remote command execution (RCE) vulnerability via the instanceId parameter at /instance/detail.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.3 · Published 2023-07-28 · No fix listed
Priority MEDIUM 51
PowerJob V4.3.1 is vulnerable to Incorrect Access Control that allows for remote code execution.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01081 · Published 2023-04-21 · No fix listed CWE-284
Priority MEDIUM 51
PowerJob V4.3.2 has unauthorized interface that causes remote code execution.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01171 · Published 2023-04-20 · No fix listed
Priority MEDIUM 42
PowerJob V4.3.1 is vulnerable to Insecure Permissions.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.09545 · Published 2023-04-19 · No fix listed CWE-276
Priority MEDIUM 63
PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create user/save interface.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.02998 · Published 2023-04-19 · No fix listed CWE-284
Priority MEDIUM 63
PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create app interface.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00533 · Published 2023-04-19 · No fix listed CWE-284
Priority LOW 34
An issue was discovered in PowerJob through 3.2.2, allows attackers to change arbitrary user passwords via the id parameter to /appinfo/save.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00818 · Published 2022-06-16 · Fixed in 3.3.3 CWE-522