Powerjob

12 CVEs across 1 Powerjob products. Browse Powerjob vulnerabilities, severities, and proof-of-concept exploits.

Powerjob products with known CVEs

ProductCVEs
Powerjob12
Powerjob CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-14518Medium6.32025-12-11A vulnerability was identified in PowerJob up to 5.1.2. This vulnerability affects the function checkConnectivity of the file src/main/java/tech/powerjob/commo…
CVE-2025-11581Medium5.32025-10-10A security vulnerability has been detected in PowerJob up to 5.1.2. This vulnerability affects unknown code of the file /openApi/runJob of the component OpenAP…
CVE-2025-11580Medium5.32025-10-10A weakness has been identified in PowerJob up to 5.1.2. This affects the function list of the file /user/list. This manipulation causes missing authorization…
CVE-2024-44546Critical9.82024-11-11Powerjob >= 3.20 is vulnerable to SQL injection via the version parameter.
CVE-2023-36106High7.52023-08-17An incorrect access control vulnerability in powerjob 4.3.2 and earlier allows remote attackers to obtain sensitive information via the interface for querying…
CVE-2023-37754Critical9.82023-07-28PowerJob v4.3.3 was discovered to contain a remote command execution (RCE) vulnerability via the instanceId parameter at /instance/detail.
CVE-2023-29924Critical9.82023-04-21PowerJob V4.3.1 is vulnerable to Incorrect Access Control that allows for remote code execution.
CVE-2023-29926Critical9.82023-04-20PowerJob V4.3.2 has unauthorized interface that causes remote code execution.
CVE-2023-29922Medium5.32023-04-19PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create user/save interface.
CVE-2023-29923Medium5.32023-04-19PowerJob V4.3.1 is vulnerable to Insecure Permissions. via the list job interface.
CVE-2023-29921Medium5.32023-04-19PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create app interface.
CVE-2020-28865High7.52022-06-16An issue was discovered in PowerJob through 3.2.2, allows attackers to change arbitrary user passwords via the id parameter to /appinfo/save.