CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6 matches found

RedhatCVE•added 2025/02/14 12:16 a.m.•20 views

CVE-2024-35090

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysUreportFileMapper.xml...

8.2CVSS8.2AI score0.00321EPSS

SaveExploits0References1

NVD•added 2024/05/23 5:15 p.m.•29 views

CVE-2024-35090

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysUreportFileMapper.xml...

8.2CVSS7.8AI score0.00321EPSS

SaveExploits0References2

Mend•added 2024/05/23 4:52 p.m.•1 views

CVE-2024-35090

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysUreportFileMapper.xml...

8.8CVSS0.00321EPSS

SaveExploits0References2

CVE•added 2024/05/23 4:52 p.m.•394 views

CVE-2024-35090

The J2EEFAST rapid development platform (version v2.7.0 ) contains a SQL injection vulnerability in the findPage function within SysUreportFileMapper.xml. The root cause is a lack of validation for external input SQL statements. An attacker can exploit this flaw to execute illegal SQL commands an...

8.2CVSS8.2AI score0.00321EPSS

SaveExploits0References2Affected Software1

Vulnrichment•added 2024/05/23 4:52 p.m.•23 views

CVE-2024-35090

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysUreportFileMapper.xml...

8.3AI score0.00321EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2024/05/23 12:00 a.m.•8 views

CVE-2024-35090: Improper Neutralization of Special Elements used in an SQL Command

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysUreportFileMapper.xml...

8.2CVSS5.9AI score0.00321EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by