fumiao records
3 published records for vendor fumiao.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Recurring classes
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
3 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
21Monitor | CVE-2025-3317No exploit | fumiao opencms dataPage.jsp path traversalfumiao · opencms · CWE-22 | Medium5.3 | 0.5%Apr 6, 2025 |
21Monitor | CVE-2025-0708No exploit | fumiao opencms Add Model Management Page addOrUpdate cross site scriptingfumiao · opencms · CWE-79 | Medium5.3 | 0.3%Jan 24, 2025 |
17Monitor | CVE-2025-28099No exploit | opencms V2.3 is vulnerable to Arbitrary file read in src/main/webapp/view/admin/document/dataPage.jsp,fumiao · opencms · CWE-22 | Medium4.3 | 0.4%Apr 21, 2025 |
- CVE-2025-331721Monitor
fumiao opencms dataPage.jsp path traversal
MediumCVSS 5.3No exploitEPSS 0%fumiao · opencmsApr 6, 2025
- CVE-2025-070821Monitor
fumiao opencms Add Model Management Page addOrUpdate cross site scripting
MediumCVSS 5.3No exploitEPSS 0%fumiao · opencmsJan 24, 2025
- CVE-2025-2809917Monitor
opencms V2.3 is vulnerable to Arbitrary file read in src/main/webapp/view/admin/document/dataPage.jsp,
MediumCVSS 4.3No exploitEPSS 0%fumiao · opencmsApr 21, 2025