https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-51165.htmlhttps://patchthecve.com/cve/CVE-2024-51165.htmlWed, 17 Jun 2026 08:05:28 +0000HIGH 7.5: SQL injection vulnerability in JEPAAS7.2.8, via /je/rbac/rbac/loadLoginCount in the dateVal parameter, which could allow a remote user to submit a specially crafted query, allowing an attacker to retrieve all the information stored in the DB.https://patchthecve.com/cve/CVE-2024-51164.htmlhttps://patchthecve.com/cve/CVE-2024-51164.htmlWed, 17 Jun 2026 08:05:28 +0000CRITICAL 9.1: Multiple parameters have SQL injection vulnerability in JEPaaS 7.2.8 via /je/login/btnLog/insertBtnLog, which could allow a remote user to submit a specially crafted query, allowing an attacker to retrieve all the information stored in the DB.https://patchthecve.com/cve/CVE-2024-46535.htmlhttps://patchthecve.com/cve/CVE-2024-46535.htmlWed, 17 Jun 2026 07:55:28 +0000CRITICAL 9.8: Jepaas v7.2.8 was discovered to contain a SQL injection vulnerability via the orderSQL parameter at /homePortal/loadUserMsg.