Every CVE whose affected-product data names Huayi-tec Jeewms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (19)
CVE-2025-60269 — CVSS 9.4 (critical): JEEWMS 20250820 is vulnerable to SQL Injection in the exportXls function located in the src/main/java/org/jeecgframework/web/cgreport/contro…
CVE-2024-57761 — CVSS 8.1 (high): An arbitrary file upload vulnerability in the parserXML() method of JeeWMS before v2025.01.01 allows attackers to execute arbitrary code…
CVE-2025-60268 — CVSS 6.5 (medium): An arbitrary file upload vulnerability exists in JeeWMS 20250820, which is caused by the lack of file checking in the saveFiles function in…
CVE-2025-70311 — CVSS 6.5 (medium): JEEWMS 1.0 is vulnerable to SQL Injection. Attackers can inject malicious SQL statements through the id1 and id2 parameters in the…
CVE-2025-5385 — CVSS 6.3 (medium): A vulnerability was found in JeeWMS up to 20250504. It has been declared as critical. This vulnerability affects the function doAdd of the…
CVE-2025-5386 — CVSS 6.3 (medium): A vulnerability was found in JeeWMS up to 20250504. It has been rated as critical. This issue affects the function transEditor of the file…
CVE-2025-5387 — CVSS 6.3 (medium): A vulnerability classified as critical has been found in JeeWMS up to 20250504. Affected is the function dogenerate of the file…
CVE-2025-5388 — CVSS 6.3 (medium): A vulnerability classified as critical was found in JeeWMS up to 20250504. Affected by this vulnerability is the function dogenerate of the…
CVE-2025-5389 — CVSS 6.3 (medium): A vulnerability, which was classified as critical, has been found in JeeWMS up to 20250504. Affected by this issue is the function…
CVE-2025-5390 — CVSS 6.3 (medium): A vulnerability, which was classified as critical, was found in JeeWMS up to 20250504. This affects the function filedeal of the file…
CVE-2024-11251 — CVSS 6.3 (medium): A vulnerability was found in erzhongxmu Jeewms up to 20241108. It has been rated as critical. This issue affects some unknown processing of…
CVE-2025-0391 — CVSS 6.3 (medium): A vulnerability, which was classified as critical, has been found in Guangzhou Huayi Intelligent Technology Jeewms up to 20241229. This…
CVE-2025-0392 — CVSS 6.3 (medium): A vulnerability, which was classified as critical, was found in Guangzhou Huayi Intelligent Technology Jeewms up to 20241229. Affected is…
CVE-2025-5384 — CVSS 6.3 (medium): A vulnerability was found in JeeWMS up to 20250504. It has been classified as critical. This affects the function CgAutoListController of…
CVE-2025-55834 — CVSS 6.1 (medium): A Cross Site Scripting vulnerability in JeeWMS v.3.7 and before allows a remote attacker to obtain sensitive information via the…
CVE-2025-0390 — CVSS 5.3 (medium): A vulnerability classified as critical was found in Guangzhou Huayi Intelligent Technology Jeewms up to 20241229. This vulnerability…
CVE-2024-12347 — CVSS 5.3 (medium): A vulnerability was found in Guangzhou Huayi Intelligent Technology Jeewms up to 1.0.0 and classified as critical. This issue affects some…
CVE-2024-11961 — CVSS 5.3 (medium): A vulnerability was found in Guangzhou Huayi Intelligent Technology Jeewms 3.7. It has been rated as problematic. This issue affects the…
CVE-2026-3028 — CVSS 4.3 (medium): A vulnerability was determined in erzhongxmu JEEWMS up to 3.7. This vulnerability affects the function doAdd of the file…