Huayi-tec vulnerabilities
We track 2 vulnerabilities in Huayi-tec products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 10, 2025.
2vulnerabilities
1critical
1high
0exploited
8.8average CVSS score
Latest Huayi-tec vulnerabilities
- 9.4 Critical severity
Jeewms: Improper Neutralization of Special Elements used in an SQL Command
JEEWMS 20250820 is vulnerable to SQL Injection in the exportXls function located in the src/main/java/org/jeecgframework/web/cgreport/controller/excel/CgExportExcelController.java file.
- 8.1 High severity
Jeewms: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the parserXML() method of JeeWMS before v2025.01.01 allows attackers to execute arbitrary code via uploading a crafted file.