CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

RedhatCVE•added 2025/02/14 12:16 a.m.•4 views

CVE-2024-35090

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysUreportFileMapper.xml...

8.2CVSS8.2AI score0.00116EPSS

Exploits0References1

NVD•added 2024/05/23 5:15 p.m.•5 views

CVE-2024-35090

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysUreportFileMapper.xml...

8.2CVSS7.8AI score0.00116EPSS

Exploits0References2

CVE•added 2024/05/23 4:52 p.m.•368 views

CVE-2024-35090

Affected software: J2EEFAST v2.7.0. Vulnerability: SQL injection via the SysUreportFileMapper.xml findPage function. Root cause: lack of validation of external input SQL statements. Impact (as stated): Attacker could execute arbitrary SQL to steal sensitive database data. References in docs: Mult...

8.2CVSS8.2AI score0.00116EPSS

Exploits0References2Affected Software1