Hanwang vulnerabilities
We track 2 vulnerabilities in Hanwang products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 5, 2026.
2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score
Latest Hanwang vulnerabilities
- 7.3 High severity
e-Face General Management Platform: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was identified in Hanwang e-Face General Management Platform 6.3.5.4. This impacts an unknown function of the file /sysAuthStr/querySysAuthStr.do. The manipulation of the argument order leads to sql injection. It is possible to initiate the att
- 7.3 High severity
e-Face General Management Platform: Improper Access Control
A vulnerability was determined in Hanwang e-Face General Management Platform 6.3.5.4. This issue affects some unknown processing of the file /manage/resourceUpload/upload.do. Executing a manipulation of the argument File can lead to unrestricted upload. The at