What’s Vulnerable › Products

Haulmont Jpa Web Api vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Haulmont Jpa Web Api version is affected

Latest Haulmont Jpa Web Api vulnerabilities

• CVE-2025-32952 — io.jmix.localfs:jmix-localfs affected by DoS in the Local File Storage (CVSS 6.5)
• CVE-2025-32951 — io.jmix.rest:jmix-rest allows XSS in the /files Endpoint of the Generic REST API (CVSS 5.4)