Jepaas@7.2.8 Security Vulnerabilities and Issues — Jepaas@7.2.8 CVE List

Lucene search

KetrJepaas7.2.8

3 matches found

CVE•added 2024/11/15 4:15 p.m.•44 views

CVE-2024-51164

Multiple parameters have SQL injection vulnerability in JEPaaS 7.2.8 via /je/login/btnLog/insertBtnLog, which could allow a remote user to submit a specially crafted query, allowing an attacker to retrieve all the information stored in the DB.

9.1CVSS7.1AI score0.00293EPSS

CVE•added 2024/10/14 5:15 p.m.•43 views

CVE-2024-46535

Jepaas v7.2.8 was discovered to contain a SQL injection vulnerability via the orderSQL parameter at /homePortal/loadUserMsg.

9.8CVSS8.3AI score0.00235EPSS

CVE•added 2024/12/10 8:15 p.m.•43 views

CVE-2024-51165

SQL injection vulnerability in JEPAAS7.2.8, via /je/rbac/rbac/loadLoginCount in the dateVal parameter, which could allow a remote user to submit a specially crafted query, allowing an attacker to retrieve all the information stored in the DB.

7.5CVSS7.5AI score0.00124EPSS