PatchTheCVE: j2eefasthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-45944: In J2eeFAST <=2.7, the backend function has unsafe filtering, which allows an attacker to trigger certain senshttps://patchthecve.com/cve/CVE-2024-45944.htmlhttps://patchthecve.com/cve/CVE-2024-45944.htmlWed, 17 Jun 2026 07:55:03 +0000CRITICAL 9.8: In J2eeFAST <=2.7, the backend function has unsafe filtering, which allows an attacker to trigger certain sensitive functions resulting in arbitrary code execution.CVE-2024-35091: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysTenanthttps://patchthecve.com/cve/CVE-2024-35091.htmlhttps://patchthecve.com/cve/CVE-2024-35091.htmlWed, 17 Jun 2026 07:34:21 +0000CRITICAL 9.8: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysTenantMapper.xml.CVE-2024-35090: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysUreporhttps://patchthecve.com/cve/CVE-2024-35090.htmlhttps://patchthecve.com/cve/CVE-2024-35090.htmlWed, 17 Jun 2026 07:34:21 +0000HIGH 8.2: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysUreportFileMapper.xml.CVE-2024-35086: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in BpmTaskFrhttps://patchthecve.com/cve/CVE-2024-35086.htmlhttps://patchthecve.com/cve/CVE-2024-35086.htmlWed, 17 Jun 2026 07:34:21 +0000CRITICAL 9.8: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in BpmTaskFromMapper.xml .CVE-2024-35085: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in ProcessDehttps://patchthecve.com/cve/CVE-2024-35085.htmlhttps://patchthecve.com/cve/CVE-2024-35085.htmlWed, 17 Jun 2026 07:34:21 +0000MEDIUM 5.4: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in ProcessDefinitionMapper.xml.CVE-2024-35084: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysMsgPushttps://patchthecve.com/cve/CVE-2024-35084.htmlhttps://patchthecve.com/cve/CVE-2024-35084.htmlWed, 17 Jun 2026 07:34:21 +0000CRITICAL 9.8: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysMsgPushMapper.xml.CVE-2024-35083: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysLoginIhttps://patchthecve.com/cve/CVE-2024-35083.htmlhttps://patchthecve.com/cve/CVE-2024-35083.htmlWed, 17 Jun 2026 07:34:21 +0000HIGH 8.8: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysLoginInfoMapper.xml.CVE-2024-35082: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysOperLohttps://patchthecve.com/cve/CVE-2024-35082.htmlhttps://patchthecve.com/cve/CVE-2024-35082.htmlWed, 17 Jun 2026 07:34:20 +0000MEDIUM 6.3: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysOperLogMapper.xml.CVE-2024-33164: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the auhttps://patchthecve.com/cve/CVE-2024-33164.htmlhttps://patchthecve.com/cve/CVE-2024-33164.htmlWed, 17 Jun 2026 07:31:29 +0000CRITICAL 9.8: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the authUserList() function.CVE-2024-33161: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the unhttps://patchthecve.com/cve/CVE-2024-33161.htmlhttps://patchthecve.com/cve/CVE-2024-33161.htmlWed, 17 Jun 2026 07:31:29 +0000MEDIUM 5.3: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the unallocatedList() function.CVE-2024-33155: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the gehttps://patchthecve.com/cve/CVE-2024-33155.htmlhttps://patchthecve.com/cve/CVE-2024-33155.htmlWed, 17 Jun 2026 07:31:29 +0000CRITICAL 9.8: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the getDeptList() function.CVE-2024-33153: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the cohttps://patchthecve.com/cve/CVE-2024-33153.htmlhttps://patchthecve.com/cve/CVE-2024-33153.htmlWed, 17 Jun 2026 07:31:29 +0000CRITICAL 9.8: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the commentList() function.CVE-2024-33149: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the myhttps://patchthecve.com/cve/CVE-2024-33149.htmlhttps://patchthecve.com/cve/CVE-2024-33149.htmlWed, 17 Jun 2026 07:31:29 +0000HIGH 8.1: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the myProcessList function.CVE-2024-33148: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the lihttps://patchthecve.com/cve/CVE-2024-33148.htmlhttps://patchthecve.com/cve/CVE-2024-33148.htmlWed, 17 Jun 2026 07:31:29 +0000HIGH 7.3: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the list function.CVE-2024-33147: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the auhttps://patchthecve.com/cve/CVE-2024-33147.htmlhttps://patchthecve.com/cve/CVE-2024-33147.htmlWed, 17 Jun 2026 07:31:28 +0000HIGH 8.8: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the authRoleList function.CVE-2024-33146: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the exhttps://patchthecve.com/cve/CVE-2024-33146.htmlhttps://patchthecve.com/cve/CVE-2024-33146.htmlWed, 17 Jun 2026 07:31:28 +0000CRITICAL 9.1: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the export function.CVE-2024-33144: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the fihttps://patchthecve.com/cve/CVE-2024-33144.htmlhttps://patchthecve.com/cve/CVE-2024-33144.htmlWed, 17 Jun 2026 07:31:28 +0000HIGH 8.8: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the findApplyedTasksPage function in BpmTaskMapper.xml.CVE-2024-33139: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the fihttps://patchthecve.com/cve/CVE-2024-33139.htmlhttps://patchthecve.com/cve/CVE-2024-33139.htmlWed, 17 Jun 2026 07:31:28 +0000HIGH 7.5: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the findpage function.