Login Request a demo
JE
Product
Jeewms
by erzhongxmu · last CVE Oct 12, 2026
21
CVEs
0
On KEV
9.8
Max CVSS
9
New 30D
Vulnerabilities21In the news0Timeline
Severity mix
Critical 3High 4Medium 14Low 0
Severity
All severities21Critical3High4Medium14Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Jeewms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-53499
9.8
1%
Aug 22
Jeewms v3.7 was discovered to contain a SQL injection vulnerability via the CgReportController API
Affected: 3.7
CVE-2025-50901
9.8
0%
Aug 20
JeeWMS 771e4f5d0c01ffdeae1671be4cf102b73a3fe644 (2025-05-19) contains incorrect authentication bypass vulnerability, which can lead to arbitrary file reading
Affected: 2025-05-19
CVE-2024-27764
9.8
1%
Mar 5
An issue in Jeewms v.3.7 and before allows a remote attacker to escalate privileges via the AuthInterceptor component
Affected: through 3.7
CVE-2024-57757
7.5
0%
Jan 15
JeeWMS before v2025.01.01 was discovered to contain a permission bypass in the component /interceptors/AuthInterceptor.cava
Affected: before 2025.01.01
CVE-2024-27765
7.5
1%
Mar 5
Directory Traversal vulnerability in Jeewms v.3.7 and before allows a remote attacker to obtain sensitive information via the cgformTemplateController component
Affected: through 3.7
CVE-2026-11457
7.3
0%
Jun 7
erzhongxmu JeeWMS JimuReport test-connection Endpoint testConnection injection
Affected: 141740afb2ba14d441c82a833d0a418d07ca2d69
CVE-2026-3026
7.3
0%
Feb 23
erzhongxmu JEEWMS UEditor getRemoteImage.jsp server-side request forgery
Affected: 3.7
CVE-2024-57760
6.5
0%
Jan 15
JeeWMS before v2025.01.01 was discovered to contain a SQL injection vulnerability via the ReportId parameter at /core/CGReportDao.java
Affected: before 2025.01.01
CVE-2026-108782
6.3
0%
Oct 12
erzhongxmu JEEWMS Autocomplete CommonServiceImpl.java CommonServiceImpl.getAutoList sql injection
Affected: 2026.09.27-W39
CVE-2026-108781
6.3
0%
Oct 12
erzhongxmu JEEWMS PDA WmToMoveGoodsController.java WmToMoveGoodsController.list sql injection
Affected: 2026.09.27-W39
CVE-2026-108779
6.3
0%
Oct 12
erzhongxmu JEEWMS WmSttInGoodsController.java WmSttInGoodsController.list sql injection
Affected: 2026.09.27-W39
CVE-2026-108778
6.3
0%
Oct 11
erzhongxmu JEEWMS Inbound Quality Check Pda WmInQmIController.java WmInQmIController.list sql injection
Affected: 2026.09.27-W39
CVE-2026-108777
6.3
0%
Oct 11
erzhongxmu JEEWMS WvGiController.java WvGiController.list sql injection
Affected: 2026.09.27-W39
CVE-2026-108775
6.3
0%
Oct 11
erzhongxmu JEEWMS Search Endpoint WvNoticeController.java WvNoticeController.list sql injection
Affected: 2026.09.27-W39
CVE-2026-108774
6.3
0%
Oct 11
erzhongxmu JEEWMS MdBinController.java getbinallagv sql injection
Affected: 2026.09.27-W39
CVE-2026-108773
6.3
0%
Oct 11
erzhongxmu JEEWMS WmOmNoticeHController.java docheck sql injection
Affected: 2026.09.27-W39
CVE-2026-108684
6.3
0%
Oct 11
erzhongxmu Jeewms Autocomplete Data JeecgFormDemoController.java getTreeData sql injection
Affected: 3.0; 3.1; 3.2; 3.3; 3.4; 3.5; +2 more
CVE-2026-3028
6.1
0%
Feb 23
erzhongxmu JEEWMS JeecgListDemoController.java doAdd cross site scripting
Affected: 3.0; 3.1; 3.2; 3.3; 3.4; 3.5; +2 more
CVE-2026-3027
6.1
0%
Feb 23
erzhongxmu JEEWMS UEditor getContent.jsp cross site scripting
Affected: 3.0; 3.1; 3.2; 3.3; 3.4; 3.5; +2 more
CVE-2025-29213
5.5
0%
Apr 15
A zip slip vulnerability in the component \service\migrate\MigrateForm.java of JEEWMS v3.7 allows attackers to execute arbitrary code via a crafted Zip file
Affected: 3.7
CVE-2026-11458
5.3
0%
Jun 7
erzhongxmu JeeWMS Boot Actuator Endpoint actuator information disclosure
Affected: 141740afb2ba14d441c82a833d0a418d07ca2d69
Showing 21