Eladmin vulnerabilities

Products

• Eladmin 15

Newest

• eladmin A vulnerability has been discovered in eladmin v2.7 and before. This vulnerability allows for an... CVE-2025-70997 6.5 MediumFebruary 4, 2026
• eladmin elunez eladmin SysLogController 1 queryErrorLogDetail improper authorization CVE-2025-10084 5.3 MediumSeptember 8, 2025
• eladmin elunez eladmin Email Address updateEmail updateUserEmail improper authorization CVE-2025-10014 2.3 LowSeptember 5, 2025
• eladmin elunez eladmin exportUser csv injection CVE-2025-9241 5.3 MediumAugust 20, 2025
• eladmin elunez eladmin info information disclosure CVE-2025-9240 5.3 MediumAugust 20, 2025
• eladmin elunez eladmin DES Key EncryptUtils.java EncryptUtils inadequate encryption CVE-2025-9239 6.3 MediumAugust 20, 2025
• eladmin elunez eladmin Druid application-prod.yml default credentials CVE-2025-8530 6.9 MediumAugust 4, 2025
• eladmin elunez eladmin Maintenance Management Module testConnect deserialization CVE-2025-3250 5.3 MediumApril 4, 2025
• eladmin elunez eladmin upload checkFile deserialization CVE-2025-2855 5.1 MediumMarch 27, 2025
• eladmin eladmin <=2.7 is vulnerable to CSV Injection in the exception log download module. CVE-2025-22978 9.8 CriticalFebruary 3, 2025
• eladmin The eladmin v2.7 and before contains a remote code execution (RCE) vulnerability that can control... CVE-2024-51243 7.2 HighOctober 30, 2024
• eladmin A Server-Side Request Forgery (SSRF) vulnerability has been identified in eladmin 2.7 and earlier... CVE-2024-51242 6.5 MediumOctober 30, 2024
• eladmin eladmin v2.7 and before is vulnerable to Server-Side Request Forgery (SSRF) which allows an... CVE-2024-44677 9.8 CriticalSeptember 10, 2024
• eladmin eladmin v2.7 and before is vulnerable to Cross Site Scripting (XSS) which allows an attacker to... CVE-2024-44676 4.8 MediumSeptember 10, 2024
• eladmin elunez eladmin Database Management/Deployment Management upload path traversal CVE-2024-7458 5.1 MediumAugust 4, 2024