JeeWMS vulnerabilities
We track 8 vulnerabilities in JeeWMS products. 8 are rated high or critical, and none are known to be exploited. The most recent was published on August 20, 2025.
Latest JeeWMS vulnerabilities
- 9.8 Critical severity
Jeewms: Improper Authentication
JeeWMS 771e4f5d0c01ffdeae1671be4cf102b73a3fe644 (2025-05-19) contains incorrect authentication bypass vulnerability, which can lead to arbitrary file reading.
- 9.8 Critical severity
JeeWMS: Incorrect Privilege Assignment
A vulnerability, which was classified as critical, was found in JeeWMS up to 20250504. This affects the function filedeal of the file /systemController/filedeal.do of the component File Handler. The manipulation leads to improper access controls. It is possibl
- 9.8 Critical severity
JeeWMS: Incorrect Privilege Assignment
A vulnerability, which was classified as critical, has been found in JeeWMS up to 20250504. Affected by this issue is the function dogenerateOne2Many of the file /generateController.do?dogenerateOne2Many of the component File Handler. The manipulation leads to
- 9.8 Critical severity
JeeWMS: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability classified as critical was found in JeeWMS up to 20250504. Affected by this vulnerability is the function dogenerate of the file /generateController.do?dogenerate. The manipulation leads to sql injection. The attack can be launched remotely. Th
- 9.8 Critical severity
JeeWMS: Incorrect Privilege Assignment
A vulnerability classified as critical has been found in JeeWMS up to 20250504. Affected is the function dogenerate of the file /generateController.do?dogenerate of the component File Handler. The manipulation leads to improper access controls. It is possible
- 9.8 Critical severity
JeeWMS: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in JeeWMS up to 20250504. It has been rated as critical. This issue affects the function transEditor of the file /cgformTransController.do?transEditor. The manipulation leads to sql injection. The attack may be initiated remotely. Thi
- 9.8 Critical severity
JeeWMS: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was found in JeeWMS up to 20250504. It has been declared as critical. This vulnerability affects the function doAdd of the file /cgformTemplateController.do?doAdd. The manipulation leads to path traversal. The attack can be initiated remotely.
- 9.8 Critical severity
JeeWMS: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in JeeWMS up to 20250504. It has been classified as critical. This affects the function CgAutoListController of the file /cgAutoListController.do?datagrid. The manipulation leads to sql injection. It is possible to initiate the attack