Hongjing vulnerabilities
We track 2 vulnerabilities in Hongjing products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 18, 2026.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest Hongjing vulnerabilities
- 9.8 Critical severity
e-HR: Improper Neutralization of Special Elements used in an SQL Command
Hongjing e-HR before 8.2 contains a SQL injection vulnerability in the /servlet/codesettree endpoint where the categories query parameter is passed to a database query without sanitization after HRMS-encoding is stripped. An unauthenticated remote attacker can
- 9.8 Critical severity
e-HR: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in Hongjing e-HR 2020. Affected by this issue is some unknown functionality of the file /w_selfservice/oauthservlet/%2e./.%2e/general/inform/org/loadhistroyorgtree of the component Login Interfa