Login Request a demo
J2
Vendor
J2eefast
1 product with CVEs on record
21
CVEs
0
On KEV
0
New 30D
Products
J2
J2eefast
J2eefast
9.8
21 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2024-45944
J2
J2eefast
J2eefast
9.8
1%
Oct 18In J2eeFAST <=2.7, the backend function has unsafe filtering, which allows an attacker to trigger certain sensitive functions resulting in arbitrary code execution
CVE-2024-35091
J2
J2eefast
J2eefast
9.8
0%
May 23J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysTenantMapper.xml
CVE-2024-35086
J2
J2eefast
J2eefast
9.8
1%
May 23J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in BpmTaskFromMapper.xml
CVE-2024-35082
J2
J2eefast
J2eefast
6.3
0%
May 23J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysOperLogMapper.xml
CVE-2024-35084
J2
J2eefast
J2eefast
9.8
0%
May 23J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysMsgPushMapper.xml
CVE-2024-35085
J2
J2eefast
J2eefast
5.4
0%
May 23J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in ProcessDefinitionMapper.xml
CVE-2024-35090
J2
J2eefast
J2eefast
8.2
0%
May 23J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysUreportFileMapper.xml
CVE-2024-35083
J2
J2eefast
J2eefast
8.8
0%
May 23J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysLoginInfoMapper.xml
CVE-2024-33161
J2
J2eefast
J2eefast
5.3
0%
May 7J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the unallocatedList() function
CVE-2024-33164
J2
J2eefast
J2eefast
9.8
1%
May 7J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the authUserList() function
CVE-2024-33155
J2
J2eefast
J2eefast
9.8
1%
May 7J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the getDeptList() function
CVE-2024-33139
J2
J2eefast
J2eefast
7.5
1%
May 7J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the findpage function
CVE-2024-33144
J2
J2eefast
J2eefast
8.8
1%
May 7J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the findApplyedTasksPage function in BpmTaskMapper.xml
CVE-2024-33146
J2
J2eefast
J2eefast
9.1
1%
May 7J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the export function
CVE-2024-33147
J2
J2eefast
J2eefast
8.8
1%
May 7J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the authRoleList function
CVE-2024-33148
J2
J2eefast
J2eefast
7.3
0%
May 7J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the list function
CVE-2024-33149
J2
J2eefast
J2eefast
8.1
0%
May 7J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the myProcessList function
CVE-2024-33153
J2
J2eefast
J2eefast
9.8
1%
May 7J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the commentList() function
CVE-2023-2476
J2
J2eefast
J2eefast
5.4
1%
May 2Dromara J2eeFAST Announcement cross site scripting
CVE-2023-2475
J2
J2eefast
J2eefast
5.4
1%
May 2Dromara J2eeFAST System Message cross site scripting
CVE-2021-28890
J2
J2eefast
J2eefast
9.8
1%
Aug 12J2eeFAST 2.2.1 allows remote attackers to perform SQL injection via the (1) compId parameter to fast/sys/user/list, (2) deptId parameter to fast/sys/role/list, or (3) roleId…