Skip to contentHuayi-tec Jeewms vulnerabilities
- erzhongxmu jeewmserzhongxmu JEEWMS JeecgListDemoController.java doAdd cross site scriptingCVE-2026-30285.3 Medium
- huayi-tec jeewmsJEEWMS 1.0 is vulnerable to SQL Injection. Attackers can inject malicious SQL statements through...CVE-2025-703116.5 Medium
- huayi-tec jeewmsJEEWMS 20250820 is vulnerable to SQL Injection in the exportXls function located in the src/main...CVE-2025-602699.4 Critical
- huayi-tec jeewmsAn arbitrary file upload vulnerability exists in JeeWMS 20250820, which is caused by the lack of...CVE-2025-602686.5 Medium
- huayi-tec jeewmsA Cross Site Scripting vulnerability in JeeWMS v.3.7 and before allows a remote attacker to...CVE-2025-558346.1 Medium
- erzhongxmu jeewmsJeeWMS File filedeal.do filedeal access controlCVE-2025-53905.3 Medium
- erzhongxmu jeewmsJeeWMS File generateController.do dogenerateOne2Many access controlCVE-2025-53895.3 Medium
- erzhongxmu jeewmsJeeWMS generateController.do dogenerate sql injectionCVE-2025-53885.3 Medium
- erzhongxmu jeewmsJeeWMS File generateController.do dogenerate access controlCVE-2025-53875.3 Medium
- erzhongxmu jeewmsJeeWMS cgformTransController.do transEditor sql injectionCVE-2025-53865.3 Medium
- erzhongxmu jeewmsJeeWMS cgformTemplateController.do doAdd path traversalCVE-2025-53855.3 Medium
- erzhongxmu jeewmsJeeWMS cgAutoListController.do CgAutoListController sql injectionCVE-2025-53845.3 Medium
- huayi-tec jeewmsAn arbitrary file upload vulnerability in the parserXML() method of JeeWMS before v2025.01.01...CVE-2024-577618.1 High
- erzhongxmu jeewmsGuangzhou Huayi Intelligent Technology Jeewms graphReportController.do datagridGraph sql injectionCVE-2025-03925.3 Medium
- erzhongxmu jeewmsGuangzhou Huayi Intelligent Technology Jeewms CgFormBuildController. java saveOrUpdate sql injectionCVE-2025-03915.3 Medium
- erzhongxmu jeewmsGuangzhou Huayi Intelligent Technology Jeewms wmOmNoticeHController.do path traversalCVE-2025-03906.9 Medium
- erzhongxmu jeewmsGuangzhou Huayi Intelligent Technology Jeewms Druid Monitoring Interface index.html improper authorizationCVE-2024-123476.9 Medium
- erzhongxmu jeewmsGuangzhou Huayi Intelligent Technology Jeewms WmOmNoticeHController.java preHandle information disclosureCVE-2024-119616.9 Medium
- erzhongxmu jeewmserzhongxmu Jeewms AuthInterceptor cgReportController.do sql injectionCVE-2024-112515.3 Medium