PatchTheCVEjeewms vulnerabilities
Recent CVEs affecting jeewms products. 7 tracked.
jeewms has 7 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-02-23. Highest priority: CVE-2024-53499 (score 55/100).
- CVE-2026-3027 MEDIUM 4.3 UPGRADE A vulnerability was found in erzhongxmu JEEWMS up to 3.7
- CVE-2026-3026 HIGH 7.3 UPGRADE A vulnerability has been found in erzhongxmu JEEWMS 3.7
- CVE-2025-50901 CRITICAL 9.8 DOWNGRADE JeeWMS 771e4f5d0c01ffdeae1671be4cf102b73a3fe644 (2025-05-19) contains incorrect authentication bypass vulnerab
- CVE-2025-29213 MEDIUM 5.5 DOWNGRADE A zip slip vulnerability in the component \service\migrate\MigrateForm.java of JEEWMS v3.7 allows attackers to
- CVE-2024-57760 MEDIUM 6.5 UPGRADE JeeWMS before v2025.01.01 was discovered to contain a SQL injection vulnerability via the ReportId parameter a
- CVE-2024-57757 HIGH 7.5 UPGRADE JeeWMS before v2025.01.01 was discovered to contain a permission bypass in the component /interceptors/AuthInt
- CVE-2024-53499 CRITICAL 9.8 DOWNGRADE Jeewms v3.7 was discovered to contain a SQL injection vulnerability via the CgReportController API.
FAQ
How do I fix jeewms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is jeewms being exploited right now?
None of the tracked jeewms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which jeewms CVE should I patch first?
CVE-2024-53499 currently ranks highest (55/100): Jeewms v3.7 was discovered to contain a SQL injection vulnerability via the CgReportController API..