PatchTheCVEplatform vulnerabilities and fixes
Recent CVEs affecting platform, with upgrade or downgrade steps. 17 tracked.
platform has 17 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2025-12-04. Highest priority: CVE-2025-7935 (score 38/100).
- CVE-2025-10819 MEDIUM 4.3 DOWNGRADE A security vulnerability has been detected in fuyang_lipengjun platform 1.0
- CVE-2025-10820 MEDIUM 4.3 DOWNGRADE A vulnerability was detected in fuyang_lipengjun platform 1.0
- CVE-2025-10821 MEDIUM 4.3 DOWNGRADE A flaw has been found in fuyang_lipengjun platform 1.0
- CVE-2025-10822 MEDIUM 4.3 DOWNGRADE A vulnerability has been found in fuyang_lipengjun platform 1.0
- CVE-2025-9936 MEDIUM 4.3 DOWNGRADE A vulnerability was identified in fuyang_lipengjun platform 1.0.0
- CVE-2025-7936 MEDIUM 6.3 DOWNGRADE A vulnerability has been found in fuyang_lipengjun platform up to ca9aceff6902feb7b0b6bf510842aea88430796a and
- CVE-2025-7935 MEDIUM 6.3 UPGRADE A vulnerability, which was classified as critical, was found in fuyang_lipengjun platform up to ca9aceff6902fe
- CVE-2025-7934 MEDIUM 6.3 UPGRADE A vulnerability, which was classified as critical, has been found in fuyang_lipengjun platform up to ca9aceff6
- CVE-2025-57213 HIGH 7.5 DOWNGRADE Incorrect access control in the component orderService.queryObject of platform v1.0.0 allows attackers to acce
- CVE-2025-57212 HIGH 7.5 DOWNGRADE Incorrect access control in the component ApiOrderService.java of platform v1.0.0 allows attackers to access s
- CVE-2025-57210 HIGH 7.5 DOWNGRADE Incorrect access control in the component ApiPayController.java of platform v1.0.0 allows attackers to access
- CVE-2025-1683 HIGH 7.8 UPGRADE Improper link resolution before file access in the Nomad module of the 1E Client, in versions prior to 25.3, e
- CVE-2025-10676 MEDIUM 4.3 DOWNGRADE A weakness has been identified in fuyang_lipengjun platform 1.0
- CVE-2025-10675 MEDIUM 4.3 DOWNGRADE A security flaw has been discovered in fuyang_lipengjun platform 1.0
- CVE-2025-10674 MEDIUM 4.3 DOWNGRADE A vulnerability was identified in fuyang_lipengjun platform 1.0
- CVE-2025-10086 MEDIUM 6.3 DOWNGRADE A weakness has been identified in fuyang_lipengjun platform 1.0.0
- CVE-2024-7211 MEDIUM 4.7 DOWNGRADE The 1E Platform's component utilized the third-party Duende Identity Server, which suffered from an open redir
FAQ
How do I fix platform vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is platform being exploited right now?
None of the tracked platform CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which platform CVE should I patch first?
CVE-2025-7935 currently ranks highest (38/100): A vulnerability, which was classified as critical, was found in fuyang_lipengjun platform up to ca9aceff6902fe.