PatchTheCVEhuayi-tec vulnerabilities
Recent CVEs affecting huayi-tec products. 19 tracked.
huayi-tec has 19 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 14. Most recent: 2026-02-23. Highest priority: CVE-2025-60269 (score 49/100).
- CVE-2026-3028 MEDIUM 4.3 UPGRADE A vulnerability was determined in erzhongxmu JEEWMS up to 3.7
- CVE-2025-70311 MEDIUM 6.5 MITIGATE JEEWMS 1.0 is vulnerable to SQL Injection
- CVE-2025-60269 CRITICAL 9.4 DOWNGRADE JEEWMS 20250820 is vulnerable to SQL Injection in the exportXls function located in the src/main/java/org/jeec
- CVE-2025-60268 MEDIUM 6.5 DOWNGRADE An arbitrary file upload vulnerability exists in JeeWMS 20250820, which is caused by the lack of file checking
- CVE-2025-5390 MEDIUM 6.3 UPGRADE A vulnerability, which was classified as critical, was found in JeeWMS up to 20250504
- CVE-2025-5389 MEDIUM 6.3 UPGRADE A vulnerability, which was classified as critical, has been found in JeeWMS up to 20250504
- CVE-2025-5388 MEDIUM 6.3 UPGRADE A vulnerability classified as critical was found in JeeWMS up to 20250504
- CVE-2025-5387 MEDIUM 6.3 UPGRADE A vulnerability classified as critical has been found in JeeWMS up to 20250504
- CVE-2025-5386 MEDIUM 6.3 UPGRADE A vulnerability was found in JeeWMS up to 20250504
- CVE-2025-5385 MEDIUM 6.3 UPGRADE A vulnerability was found in JeeWMS up to 20250504
- CVE-2025-5384 MEDIUM 6.3 UPGRADE A vulnerability was found in JeeWMS up to 20250504
- CVE-2025-55834 MEDIUM 6.1 UPGRADE A Cross Site Scripting vulnerability in JeeWMS v.3.7 and before allows a remote attacker to obtain sensitive i
- CVE-2025-0392 MEDIUM 6.3 UPGRADE A vulnerability, which was classified as critical, was found in Guangzhou Huayi Intelligent Technology Jeewms
- CVE-2025-0391 MEDIUM 6.3 UPGRADE A vulnerability, which was classified as critical, has been found in Guangzhou Huayi Intelligent Technology Je
- CVE-2025-0390 MEDIUM 5.3 UPGRADE A vulnerability classified as critical was found in Guangzhou Huayi Intelligent Technology Jeewms up to 202412
- CVE-2024-57761 HIGH 8.1 UPGRADE An arbitrary file upload vulnerability in the parserXML() method of JeeWMS before v2025.01.01 allows attackers
- CVE-2024-12347 MEDIUM 5.3 MITIGATE A vulnerability was found in Guangzhou Huayi Intelligent Technology Jeewms up to 1.0.0 and classified as criti
- CVE-2024-11961 MEDIUM 5.3 DOWNGRADE A vulnerability was found in Guangzhou Huayi Intelligent Technology Jeewms 3.7
- CVE-2024-11251 MEDIUM 6.3 UPGRADE A vulnerability was found in erzhongxmu Jeewms up to 20241108
FAQ
How do I fix huayi-tec vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is huayi-tec being exploited right now?
None of the tracked huayi-tec CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which huayi-tec CVE should I patch first?
CVE-2025-60269 currently ranks highest (49/100): JEEWMS 20250820 is vulnerable to SQL Injection in the exportXls function located in the src/main/java/org/jeec.