Erzhongxmu vulnerabilities
We track 4 vulnerabilities in Erzhongxmu products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on June 7, 2026.
Latest Erzhongxmu vulnerabilities
- 7.3 High severity
JeeWMS: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security flaw has been discovered in erzhongxmu JeeWMS up to 141740afb2ba14d441c82a833d0a418d07ca2d69. This vulnerability affects unknown code of the file /base-boot/jmreport/testConnection of the component JimuReport test-connection Endpoint. Performing a m
- 7.3 High severity
JEEWMS: Server-Side Request Forgery
A vulnerability has been found in erzhongxmu JEEWMS 3.7. Affected by this issue is some unknown functionality of the file /plug-in/ueditor/jsp/getRemoteImage.jsp of the component UEditor. The manipulation of the argument upfile leads to server-side request for
- 8.8 High severity
Jeewms: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in erzhongxmu Jeewms up to 20241108. It has been rated as critical. This issue affects some unknown processing of the file cgReportController.do of the component AuthInterceptor. The manipulation of the argument begin_date leads to sq
- 7.5 High severity
jeewms: Improper Limitation of a Pathname to a Restricted Directory
Directory Traversal vulnerability in Jeewms v.3.7 and before allows a remote attacker to obtain sensitive information via the cgformTemplateController component.