EL
Vendor
elunez
13
CVEs
0
On KEV
3
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-111604 | EL eladmin elunez | 3.8 | Oct 16 | eladmin through 2.7 Broken Access Control via /api/users Update and Delete |
| CVE-2026-108706 | EL eladmin elunez | 4.3 | Oct 11 | eladmin through commit 55fbf70 Missing Authorization via S3 Storage Download Endpoint |
| CVE-2026-108688 | EL eladmin elunez | 4.3 | Oct 11 | Eladmin through 2.7 Missing Authorization via /api/localStorage/pictures Upload |
| CVE-2025-10084 | EL eladmin elunez | 4.3 | Sep 8 | elunez eladmin SysLogController 1 queryErrorLogDetail improper authorization |
| CVE-2025-10014 | EL eladmin elunez | 3.1 | Sep 5 | elunez eladmin Email Address updateEmail updateUserEmail improper authorization |
| CVE-2025-9937 | EL eladmin elunez | 5.4 | Sep 3 | elunez eladmin LocalStorageController deleteFile improper authorization |
| CVE-2025-9241 | EL eladmin elunez | 7.5 | Aug 20 | elunez eladmin exportUser csv injection |
| CVE-2025-9240 | EL eladmin elunez | 4.3 | Aug 20 | elunez eladmin info information disclosure |
| CVE-2025-9239 | EL eladmin elunez | 3.7 | Aug 20 | elunez eladmin DES Key EncryptUtils.java EncryptUtils inadequate encryption |
| CVE-2025-8530 | EL eladmin elunez | 7.5 | Aug 4 | elunez eladmin Druid application-prod.yml default credentials |
| CVE-2025-3250 | EL eladmin elunez | 6.5 | Apr 4 | elunez eladmin Maintenance Management Module testConnect deserialization |
| CVE-2025-2855 | EL eladmin elunez | 7.2 | Mar 27 | elunez eladmin upload checkFile deserialization |
| CVE-2024-7458 | EL eladmin elunez | 9.8 | Aug 4 | elunez eladmin Database Management/Deployment Management upload path traversal |