Tiandy vulnerabilities
We track 10 vulnerabilities in Tiandy products across 6 products. 10 are rated high or critical, and none are known to be exploited. The most recent was published on May 25, 2026.
Latest Tiandy vulnerabilities
- 7.3 High severity
Easy7 Integrated Management Platform: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in Tiandy Easy7 Integrated Management Platform 7.17.0. This vulnerability affects unknown code of the file /Easy7/apps/WebService/GetDBDataEx.jsp. Performing a manipulation of the argument strTBName results in sql injection. Remote ex
- 7.3 High severity
Easy7 Integrated Management Platform: Improper Neutralization of Special Elements used in a Command
A vulnerability was identified in Tiandy Easy7 Integrated Management Platform 7.17.0. Affected by this vulnerability is an unknown functionality of the file /Easy7/rest/systemInfo/updateDbBackupInfo. Such manipulation of the argument week leads to os command i
- 9.8 Critical severity
Easy7 Integrated Management Platform: Improper Neutralization of Special Elements used in a Command
A vulnerability has been found in Tiandy Easy7 Integrated Management Platform up to 7.17.0. This vulnerability affects unknown code of the file /Easy7/apps/WebService/ImportSystemConfiguration.jsp of the component Configuration Handler. The manipulation of the
- 7.3 High severity
Easy7 Integrated Management Platform: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security vulnerability has been detected in Tiandy Easy7 Integrated Management Platform up to 7.17.0. This affects an unknown function of the file /rest/preSetTemplate/getRecByTemplateId. The manipulation of the argument ID leads to sql injection. The attack
- 7.3 High severity
Easy7 Integrated Management Platform: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A weakness has been identified in Tiandy Easy7 Integrated Management Platform 7.17.0. The impacted element is an unknown function of the file /rest/devStatus/getDevDetailedInfo of the component Endpoint. Executing a manipulation of the argument ID can lead to
- 7.3 High severity
Easy7 Integrated Management Platform: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security flaw has been discovered in Tiandy Easy7 Integrated Management Platform 7.17.0. The affected element is an unknown function of the file /rest/devStatus/queryResources of the component Endpoint. Performing a manipulation of the argument areaId result
- 7.3 High severity
Integrated Management Platform: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was determined in Tiandy Integrated Management Platform 7.17.0. Affected by this issue is some unknown functionality of the file /rest/user/getAuthorityByUserId. Executing a manipulation of the argument userId can lead to sql injection. The att
- 7.3 High severity
Easy7 Integrated Management Platform: Improper Access Control
A vulnerability was found in Tiandy Easy7 Integrated Management Platform 7.17.0. This affects an unknown part of the file /rest/file/uploadLedImage of the component Endpoint. The manipulation of the argument File results in unrestricted upload. The attack may
- 9.8 Critical severity
Easy7 CMS Windows: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in Tiandy Easy7 CMS Windows 7.17.0. Impacted is an unknown function of the file /Easy7/apps/WebService/GetDBData.jsp. This manipulation of the argument strTBName causes sql injection. The attack may be initiated remotely. The exploit has
- 8.8 High severity
Video Surveillance System 视频监控平台: Unrestricted Upload of File with Dangerous Type
A security vulnerability has been detected in Tiandy Video Surveillance System 视频监控平台 7.17.0. The impacted element is the function uploadFile of the file /src/com/tiandy/easy7/core/rest/CLS_REST_File.java. The manipulation of the argument fileName leads to unr