jeewms vulnerabilities and fixes

Recent CVEs affecting jeewms, with upgrade or downgrade steps. 26 tracked.

jeewms has 26 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 18. Most recent: 2026-02-23. Highest priority: CVE-2024-53499 (score 55/100).

• CVE-2026-3028 MEDIUM 4.3 UPGRADE A vulnerability was determined in erzhongxmu JEEWMS up to 3.7
• CVE-2026-3027 MEDIUM 4.3 UPGRADE A vulnerability was found in erzhongxmu JEEWMS up to 3.7
• CVE-2026-3026 HIGH 7.3 UPGRADE A vulnerability has been found in erzhongxmu JEEWMS 3.7
• CVE-2025-70311 MEDIUM 6.5 MITIGATE JEEWMS 1.0 is vulnerable to SQL Injection
• CVE-2025-60269 CRITICAL 9.4 DOWNGRADE JEEWMS 20250820 is vulnerable to SQL Injection in the exportXls function located in the src/main/java/org/jeec
• CVE-2025-60268 MEDIUM 6.5 DOWNGRADE An arbitrary file upload vulnerability exists in JeeWMS 20250820, which is caused by the lack of file checking
• CVE-2025-5390 MEDIUM 6.3 UPGRADE A vulnerability, which was classified as critical, was found in JeeWMS up to 20250504
• CVE-2025-5389 MEDIUM 6.3 UPGRADE A vulnerability, which was classified as critical, has been found in JeeWMS up to 20250504
• CVE-2025-5388 MEDIUM 6.3 UPGRADE A vulnerability classified as critical was found in JeeWMS up to 20250504
• CVE-2025-5387 MEDIUM 6.3 UPGRADE A vulnerability classified as critical has been found in JeeWMS up to 20250504
• CVE-2025-5386 MEDIUM 6.3 UPGRADE A vulnerability was found in JeeWMS up to 20250504
• CVE-2025-5385 MEDIUM 6.3 UPGRADE A vulnerability was found in JeeWMS up to 20250504
• CVE-2025-5384 MEDIUM 6.3 UPGRADE A vulnerability was found in JeeWMS up to 20250504
• CVE-2025-55834 MEDIUM 6.1 UPGRADE A Cross Site Scripting vulnerability in JeeWMS v.3.7 and before allows a remote attacker to obtain sensitive i
• CVE-2025-50901 CRITICAL 9.8 DOWNGRADE JeeWMS 771e4f5d0c01ffdeae1671be4cf102b73a3fe644 (2025-05-19) contains incorrect authentication bypass vulnerab
• CVE-2025-29213 MEDIUM 5.5 DOWNGRADE A zip slip vulnerability in the component \service\migrate\MigrateForm.java of JEEWMS v3.7 allows attackers to
• CVE-2025-0392 MEDIUM 6.3 UPGRADE A vulnerability, which was classified as critical, was found in Guangzhou Huayi Intelligent Technology Jeewms
• CVE-2025-0391 MEDIUM 6.3 UPGRADE A vulnerability, which was classified as critical, has been found in Guangzhou Huayi Intelligent Technology Je
• CVE-2025-0390 MEDIUM 5.3 UPGRADE A vulnerability classified as critical was found in Guangzhou Huayi Intelligent Technology Jeewms up to 202412
• CVE-2024-57761 HIGH 8.1 UPGRADE An arbitrary file upload vulnerability in the parserXML() method of JeeWMS before v2025.01.01 allows attackers
• CVE-2024-57760 MEDIUM 6.5 UPGRADE JeeWMS before v2025.01.01 was discovered to contain a SQL injection vulnerability via the ReportId parameter a
• CVE-2024-57757 HIGH 7.5 UPGRADE JeeWMS before v2025.01.01 was discovered to contain a permission bypass in the component /interceptors/AuthInt
• CVE-2024-53499 CRITICAL 9.8 DOWNGRADE Jeewms v3.7 was discovered to contain a SQL injection vulnerability via the CgReportController API.
• CVE-2024-12347 MEDIUM 5.3 MITIGATE A vulnerability was found in Guangzhou Huayi Intelligent Technology Jeewms up to 1.0.0 and classified as criti
• CVE-2024-11961 MEDIUM 5.3 DOWNGRADE A vulnerability was found in Guangzhou Huayi Intelligent Technology Jeewms 3.7
• CVE-2024-11251 MEDIUM 6.3 UPGRADE A vulnerability was found in erzhongxmu Jeewms up to 20241108

FAQ

How do I fix jeewms vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is jeewms being exploited right now?

None of the tracked jeewms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which jeewms CVE should I patch first?

CVE-2024-53499 currently ranks highest (55/100): Jeewms v3.7 was discovered to contain a SQL injection vulnerability via the CgReportController API..

RSS feed for jeewms · ← Back to latest CVEs