Shenzhen Landray Software vulnerabilities
We track 1 vulnerability in Shenzhen Landray Software products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 2, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Shenzhen Landray Software vulnerabilities
- 7.5 High severity
Landry Office Automation (OA): Use of Hibernate with HQL/SQL Query String Containing External Input
Landray OA contains an unauthenticated HQL injection vulnerability that allows unauthenticated attackers to query arbitrary Hibernate entity classes by injecting malicious HQL syntax into the uid POST parameter of the wechatLoginHelper.do endpoint. Attackers c