JTL SW vulnerabilities
We track 2 vulnerabilities in JTL SW products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 14, 2026.
2vulnerabilities
2critical
0high
0exploited
9.9average CVSS score
Latest JTL SW vulnerabilities
- 9.9 Critical severity
JTL-WMS: Improper Neutralization of Special Elements used in an SQL Command
A parameter taken from the request body is inserted into a T-SQL statement without parameterization or escaping, allowing a remote attacker to execute arbitrary SQL statements in the context of the application's database account.
- 10.0 Critical severity
JTL-WMS: Missing Authentication for Critical Functionality
The authorization middleware of the WMS MobileServer fails to require authentication in two distinct cases. First, it only requires an Authorization header for GET and HEAD requests; requests using any other HTTP method are processed without an authentication