Login Request a demo
DW
Product
DWSurvey
by diaowen · last CVE Aug 4, 2026
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 3High 1Medium 5Low 0
Severity
All severities9Critical3High1Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add DWSurvey to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-40980
9.8
1%
Sep 1
File Upload vulnerability in DWSurvey DWSurvey-OSS v.3.2.0 and before allows a remote attacker to execute arbitrary code via the saveimage method and savveFile in the…
Affected: through 3.2.0
CVE-2021-39384
9.8
1%
Mar 20
DWSurvey v3.2.0 was discovered to contain an arbitrary file write vulnerability via the component /utils/ToHtmlServlet.java
Affected: 3.2.0
CVE-2021-39383
9.8
3%
Mar 20
DWSurvey v3.2.0 was discovered to contain a remote command execution (RCE) vulnerability via the component /sysuser/SysPropertyAction.java
Affected: 3.2.0
CVE-2025-63248
7.5
0%
Nov 5
DWSurvey 6.14.0 is vulnerable to Incorrect Access Control
Affected: 6.14.0
CVE-2026-18723
6.3
0%
Aug 4
diaowen DWSurvey Survey Status up-survey-status.do improper authorization
Affected: 6.0; 6.1; 6.2; 6.3; 6.4; 6.5; +9 more
CVE-2026-18722
6.3
0%
Aug 4
diaowen DWSurvey dev-survey.do in DwDeisgnSurveyController.devSurvey. authorization
Affected: 6.0; 6.1; 6.2; 6.3; 6.4; 6.5; +9 more
CVE-2020-20070
6.1
1%
Jun 20
Cross Site Scripting vulnerability found in wkeyuan DWSurvey 1.0 allows a remote attacker to execute arbitrary code via thequltemld parameter of the…
Affected: 1.0
CVE-2019-15095
6.1
1%
Aug 16
DWSurvey through 2019-07-22 has reflected XSS via the design/qu-multi-fillblank!answers.action surveyId parameter
Affected: through 2019-07-22
CVE-2019-14747
6.1
1%
Aug 7
DWSurvey through 2019-07-22 has stored XSS via the design/my-survey-design!copySurvey.action surveyName parameter
Affected: through 2019-07-22
Showing 9