JEPaaS vulnerabilities

1 known vulnerability in JEPaaS from Ketr. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Jepaas: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-51165Dec 10, 2024Ketr

  SQL injection vulnerability in JEPAAS7.2.8, via /je/rbac/rbac/loadLoginCount in the dateVal parameter, which could allow a remote user to submit a specially crafted query, allowing an attacker to retrieve all the information stored in the DB.