JEPaaS vulnerabilities
We track 1 vulnerability in JEPaaS products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 15, 2024.
1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score
Latest JEPaaS vulnerabilities
- 9.1 Critical severity
jepaas: Improper Neutralization of Special Elements used in an SQL Command
Multiple parameters have SQL injection vulnerability in JEPaaS 7.2.8 via /je/login/btnLog/insertBtnLog, which could allow a remote user to submit a specially crafted query, allowing an attacker to retrieve all the information stored in the DB.