Jeewms

9 CVEs across 1 Jeewms products. Browse Jeewms vulnerabilities, severities, and proof-of-concept exploits.

Jeewms products with known CVEs

ProductCVEs
Jeewms9
Jeewms CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-3027Medium4.32026-02-23A vulnerability was found in erzhongxmu JEEWMS up to 3.7. This affects an unknown part of the file src/main/webapp/plug-in/ueditor/jsp/getContent.jsp of the co…
CVE-2026-3026High7.32026-02-23A vulnerability has been found in erzhongxmu JEEWMS 3.7. Affected by this issue is some unknown functionality of the file /plug-in/ueditor/jsp/getRemoteImage.j…
CVE-2024-53499Critical9.82025-08-22Jeewms v3.7 was discovered to contain a SQL injection vulnerability via the CgReportController API.
CVE-2025-50901Critical9.82025-08-20JeeWMS 771e4f5d0c01ffdeae1671be4cf102b73a3fe644 (2025-05-19) contains incorrect authentication bypass vulnerability, which can lead to arbitrary file reading.
CVE-2025-29213Medium5.52025-04-15A zip slip vulnerability in the component \service\migrate\MigrateForm.java of JEEWMS v3.7 allows attackers to execute arbitrary code via a crafted Zip file.
CVE-2024-57760Medium6.52025-01-15JeeWMS before v2025.01.01 was discovered to contain a SQL injection vulnerability via the ReportId parameter at /core/CGReportDao.java.
CVE-2024-57757High7.52025-01-15JeeWMS before v2025.01.01 was discovered to contain a permission bypass in the component /interceptors/AuthInterceptor.cava.
CVE-2024-27765High7.52024-03-05Directory Traversal vulnerability in Jeewms v.3.7 and before allows a remote attacker to obtain sensitive information via the cgformTemplateController componen…
CVE-2024-27764Critical9.82024-03-05An issue in Jeewms v.3.7 and before allows a remote attacker to escalate privileges via the AuthInterceptor component.