5kcrm records
5 published records for vendor 5kcrm.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 20%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-502 Deserialization of Untrusted Data2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-266 Incorrect Privilege Assignment1
- CWE-352 Cross-Site Request Forgery (CSRF)1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2024-23052No exploit | An issue in WuKongOpenSource WukongCRM v.72crm_9.0.1_20191202 allows a remote attacker to execute arbitrary code via the parseObject() funct5kcrm · wukong crm · CWE-502 | Critical9.8 | — | 4.9% | Feb 28, 2024 |
26Monitor | CVE-2025-60828No exploit | WukongCRM-9.0-JAVA was discovered to contain a fastjson deserialization vulnerability via the /OaExamine/setOaExamine interface.5kcrm · wukong crm · CWE-502 | Medium6.5 | — | 0.3% | Oct 8, 2025 |
21Monitor | CVE-2025-5521No exploit | WuKongOpenSource WukongCRM updataPassword cross-site request forgery5kcrm · wukong crm · CWE-352 | Medium5.3 | — | 0.3% | Jun 3, 2025 |
8Monitor | CVE-2026-2141No exploit | WuKongOpenSource WukongCRM URL PermissionServiceImpl.java improper authorization5kcrm · wukong crm · CWE-266 | Low2.1 | — | 0.4% | Feb 8, 2026 |
8Monitor | CVE-2025-8852No exploit | WuKongOpenSource WukongCRM API Response upload information exposure5kcrm · wukong crm · CWE-200 | Low2.1 | — | 0.3% | Aug 11, 2025 |
- CVE-2024-2305240Plan
An issue in WuKongOpenSource WukongCRM v.72crm_9.0.1_20191202 allows a remote attacker to execute arbitrary code via the parseObject() funct
CriticalCVSS 9.8No exploitEPSS 4%5kcrm · wukong crmFeb 28, 2024
- CVE-2025-6082826Monitor
WukongCRM-9.0-JAVA was discovered to contain a fastjson deserialization vulnerability via the /OaExamine/setOaExamine interface.
MediumCVSS 6.5No exploitEPSS 0%5kcrm · wukong crmOct 8, 2025
- CVE-2025-552121Monitor
WuKongOpenSource WukongCRM updataPassword cross-site request forgery
MediumCVSS 5.3No exploitEPSS 0%5kcrm · wukong crmJun 3, 2025
- CVE-2026-21418Monitor
WuKongOpenSource WukongCRM URL PermissionServiceImpl.java improper authorization
LowCVSS 2.1No exploitEPSS 0%5kcrm · wukong crmFeb 8, 2026
- CVE-2025-88528Monitor
WuKongOpenSource WukongCRM API Response upload information exposure
LowCVSS 2.1No exploitEPSS 0%5kcrm · wukong crmAug 11, 2025