Jeewms vulnerabilities

2 known vulnerabilities in Jeewms from Huayi-tec. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.4 Critical severity

  Jeewms: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-60269Oct 10, 2025Huayi-tec

  JEEWMS 20250820 is vulnerable to SQL Injection in the exportXls function located in the src/main/java/org/jeecgframework/web/cgreport/controller/excel/CgExportExcelController.java file.

• 8.1 High severity

  Jeewms: Unrestricted Upload of File with Dangerous Type

  CVE-2024-57761Jan 15, 2025Huayi-tec

  An arbitrary file upload vulnerability in the parserXML() method of JeeWMS before v2025.01.01 allows attackers to execute arbitrary code via uploading a crafted file.