What’s Vulnerable › Products

erzhongxmu JEEWMS vulnerabilities

30 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 30 published in the last 12 months.

Check whether your erzhongxmu JEEWMS version is affected

Latest erzhongxmu JEEWMS vulnerabilities

• CVE-2026-108782 — erzhongxmu JEEWMS Autocomplete CommonServiceImpl.java CommonServiceImpl.getAutoList sql injection (CVSS 6.3)
• CVE-2026-108781 — erzhongxmu JEEWMS PDA WmToMoveGoodsController.java WmToMoveGoodsController.list sql injection (CVSS 6.3)
• CVE-2026-108779 — erzhongxmu JEEWMS WmSttInGoodsController.java WmSttInGoodsController.list sql injection (CVSS 6.3)
• CVE-2026-108778 — erzhongxmu JEEWMS Inbound Quality Check Pda WmInQmIController.java WmInQmIController.list sql injection (CVSS 6.3)
• CVE-2026-108777 — erzhongxmu JEEWMS WvGiController.java WvGiController.list sql injection (CVSS 6.3)
• CVE-2026-108775 — erzhongxmu JEEWMS Search Endpoint WvNoticeController.java WvNoticeController.list sql injection (CVSS 6.3)
• CVE-2026-108774 — erzhongxmu JEEWMS MdBinController.java getbinallagv sql injection (CVSS 6.3)
• CVE-2026-108773 — erzhongxmu JEEWMS WmOmNoticeHController.java docheck sql injection (CVSS 6.3)
• CVE-2026-108684 — erzhongxmu Jeewms Autocomplete Data JeecgFormDemoController.java getTreeData sql injection (CVSS 6.3)
• CVE-2026-11458 — erzhongxmu JeeWMS Boot Actuator Endpoint actuator information disclosure (CVSS 5.3)
• CVE-2026-11457 — erzhongxmu JeeWMS JimuReport test-connection Endpoint testConnection injection (CVSS 7.3)
• CVE-2026-3028 — erzhongxmu JEEWMS JeecgListDemoController.java doAdd cross site scripting (CVSS 6.1)
• CVE-2025-70311 — (CVSS 6.5)
• CVE-2025-60268 — (CVSS 6.5)
• CVE-2025-60269 — (CVSS 9.4)
• CVE-2025-55834 — (CVSS 6.1)
• CVE-2025-5390 — JeeWMS File filedeal.do filedeal access control (CVSS 9.8)
• CVE-2025-5389 — JeeWMS File generateController.do dogenerateOne2Many access control (CVSS 9.8)
• CVE-2025-5388 — JeeWMS generateController.do dogenerate sql injection (CVSS 9.8)
• CVE-2025-5387 — JeeWMS File generateController.do dogenerate access control (CVSS 9.8)
• CVE-2025-5386 — JeeWMS cgformTransController.do transEditor sql injection (CVSS 9.8)
• CVE-2025-5385 — JeeWMS cgformTemplateController.do doAdd path traversal (CVSS 9.8)
• CVE-2025-5384 — JeeWMS cgAutoListController.do CgAutoListController sql injection (CVSS 9.8)
• CVE-2024-57761 — (CVSS 8.1)
• CVE-2025-0392 — Guangzhou Huayi Intelligent Technology Jeewms graphReportController.do datagridGraph sql injection (CVSS 8.8)