Login Request a demo
JE
Product
Jeewms
by erzhongxmu · last CVE Oct 12, 2026
21
CVEs
0
On KEV
9.8
Max CVSS
9
New 30D
Vulnerabilities21In the news0Timeline
Severity mix
Critical 3High 4Medium 14Low 0
Severity
All severities21Critical3High4Medium14Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Jeewms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-57760
6.5
0%
Jan 14
JeeWMS before v2025.01.01 was discovered to contain a SQL injection vulnerability via the ReportId parameter at /core/CGReportDao.java
Affected: before 2025.01.01
CVE-2026-108782
6.3
0%
Oct 12
erzhongxmu JEEWMS Autocomplete CommonServiceImpl.java CommonServiceImpl.getAutoList sql injection
Affected: 2026.09.27-W39
CVE-2026-108781
6.3
0%
Oct 12
erzhongxmu JEEWMS PDA WmToMoveGoodsController.java WmToMoveGoodsController.list sql injection
Affected: 2026.09.27-W39
CVE-2026-108779
6.3
0%
Oct 12
erzhongxmu JEEWMS WmSttInGoodsController.java WmSttInGoodsController.list sql injection
Affected: 2026.09.27-W39
CVE-2026-108778
6.3
0%
Oct 11
erzhongxmu JEEWMS Inbound Quality Check Pda WmInQmIController.java WmInQmIController.list sql injection
Affected: 2026.09.27-W39
CVE-2026-108777
6.3
0%
Oct 11
erzhongxmu JEEWMS WvGiController.java WvGiController.list sql injection
Affected: 2026.09.27-W39
CVE-2026-108775
6.3
0%
Oct 11
erzhongxmu JEEWMS Search Endpoint WvNoticeController.java WvNoticeController.list sql injection
Affected: 2026.09.27-W39
CVE-2026-108774
6.3
0%
Oct 11
erzhongxmu JEEWMS MdBinController.java getbinallagv sql injection
Affected: 2026.09.27-W39
CVE-2026-108773
6.3
0%
Oct 11
erzhongxmu JEEWMS WmOmNoticeHController.java docheck sql injection
Affected: 2026.09.27-W39
CVE-2026-108684
6.3
0%
Oct 11
erzhongxmu Jeewms Autocomplete Data JeecgFormDemoController.java getTreeData sql injection
Affected: 3.0; 3.1; 3.2; 3.3; 3.4; 3.5; +2 more
CVE-2026-3028
6.1
0%
Feb 23
erzhongxmu JEEWMS JeecgListDemoController.java doAdd cross site scripting
Affected: 3.0; 3.1; 3.2; 3.3; 3.4; 3.5; +2 more
CVE-2026-3027
6.1
0%
Feb 23
erzhongxmu JEEWMS UEditor getContent.jsp cross site scripting
Affected: 3.0; 3.1; 3.2; 3.3; 3.4; 3.5; +2 more
CVE-2025-29213
5.5
0%
Apr 15
A zip slip vulnerability in the component \service\migrate\MigrateForm.java of JEEWMS v3.7 allows attackers to execute arbitrary code via a crafted Zip file
Affected: 3.7
CVE-2026-11458
5.3
0%
Jun 7
erzhongxmu JeeWMS Boot Actuator Endpoint actuator information disclosure
Affected: 141740afb2ba14d441c82a833d0a418d07ca2d69
Showing 14