ER
Vendor
erzhongxmu
21
CVEs
0
On KEV
9
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-108782 | JE JEEWMS erzhongxmu | 6.3 | Oct 12 | erzhongxmu JEEWMS Autocomplete CommonServiceImpl.java CommonServiceImpl.getAutoList sql injection |
| CVE-2026-108781 | JE JEEWMS erzhongxmu | 6.3 | Oct 12 | erzhongxmu JEEWMS PDA WmToMoveGoodsController.java WmToMoveGoodsController.list sql injection |
| CVE-2026-108779 | JE JEEWMS erzhongxmu | 6.3 | Oct 12 | erzhongxmu JEEWMS WmSttInGoodsController.java WmSttInGoodsController.list sql injection |
| CVE-2026-108778 | JE JEEWMS erzhongxmu | 6.3 | Oct 11 | erzhongxmu JEEWMS Inbound Quality Check Pda WmInQmIController.java WmInQmIController.list sql injection |
| CVE-2026-108777 | JE JEEWMS erzhongxmu | 6.3 | Oct 11 | erzhongxmu JEEWMS WvGiController.java WvGiController.list sql injection |
| CVE-2026-108775 | JE JEEWMS erzhongxmu | 6.3 | Oct 11 | erzhongxmu JEEWMS Search Endpoint WvNoticeController.java WvNoticeController.list sql injection |
| CVE-2026-108774 | JE JEEWMS erzhongxmu | 6.3 | Oct 11 | erzhongxmu JEEWMS MdBinController.java getbinallagv sql injection |
| CVE-2026-108773 | JE JEEWMS erzhongxmu | 6.3 | Oct 11 | erzhongxmu JEEWMS WmOmNoticeHController.java docheck sql injection |
| CVE-2026-108684 | JE Jeewms erzhongxmu | 6.3 | Oct 11 | erzhongxmu Jeewms Autocomplete Data JeecgFormDemoController.java getTreeData sql injection |
| CVE-2026-11458 | JE JeeWMS erzhongxmu | 5.3 | Jun 7 | erzhongxmu JeeWMS Boot Actuator Endpoint actuator information disclosure |
| CVE-2026-11457 | JE JeeWMS erzhongxmu | 7.3 | Jun 7 | erzhongxmu JeeWMS JimuReport test-connection Endpoint testConnection injection |
| CVE-2026-3028 | JE JEEWMS erzhongxmu | 6.1 | Feb 23 | erzhongxmu JEEWMS JeecgListDemoController.java doAdd cross site scripting |
| CVE-2026-3027 | JE JEEWMS erzhongxmu | 6.1 | Feb 23 | erzhongxmu JEEWMS UEditor getContent.jsp cross site scripting |
| CVE-2026-3026 | JE JEEWMS erzhongxmu | 7.3 | Feb 23 | erzhongxmu JEEWMS UEditor getRemoteImage.jsp server-side request forgery |
| CVE-2024-53499 | JE Jeewms Jeewms | 9.8 | Aug 22 | Jeewms v3.7 was discovered to contain a SQL injection vulnerability via the CgReportController API |
| CVE-2025-50901 | JE Jeewms Jeewms | 9.8 | Aug 20 | JeeWMS 771e4f5d0c01ffdeae1671be4cf102b73a3fe644 (2025-05-19) contains incorrect authentication bypass vulnerability, which can lead to arbitrary file reading |
| CVE-2025-29213 | JE Jeewms Jeewms | 5.5 | Apr 15 | A zip slip vulnerability in the component \service\migrate\MigrateForm.java of JEEWMS v3.7 allows attackers to execute arbitrary code via a crafted Zip file |
| CVE-2024-57760 | JE Jeewms Jeewms | 6.5 | Jan 15 | JeeWMS before v2025.01.01 was discovered to contain a SQL injection vulnerability via the ReportId parameter at /core/CGReportDao.java |
| CVE-2024-57757 | JE Jeewms Jeewms | 7.5 | Jan 15 | JeeWMS before v2025.01.01 was discovered to contain a permission bypass in the component /interceptors/AuthInterceptor.cava |
| CVE-2024-27765 | JE Jeewms Jeewms | 7.5 | Mar 5 | Directory Traversal vulnerability in Jeewms v.3.7 and before allows a remote attacker to obtain sensitive information via the cgformTemplateController component |
| CVE-2024-27764 | JE Jeewms Jeewms | 9.8 | Mar 5 | An issue in Jeewms v.3.7 and before allows a remote attacker to escalate privileges via the AuthInterceptor component |