j2eefast kayıtları

j2eefast üreticisine ait 21 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 1
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')18
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

21 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
39İzleyin	CVE-2021-28890İstismar yok	J2eeFAST 2.2.1 allows remote attackers to perform SQL injection via the (1) compId parameter to fast/sys/user/list, (2) deptId parameter to j2eefast · j2eefast · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,8	—	%1,3	12 Ağu 2021
39İzleyin	CVE-2024-45944İstismar yok	In J2eeFAST <=2.7, the backend function has unsafe filtering, which allows an attacker to trigger certain sensitive functions resulting in aj2eefast · j2eefast pre-auth RCE	Kritik9,8	—	%0,9	18 Eki 2024
39İzleyin	CVE-2024-33164İstismar yok	J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the authUserList() function.j2eefast · j2eefast · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,8	—	%0,6	7 May 2024
39İzleyin	CVE-2024-33153İstismar yok	J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the commentList() function.j2eefast · j2eefast · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,8	—	%0,6	7 May 2024
39İzleyin	CVE-2024-33155İstismar yok	J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the getDeptList() function.j2eefast · j2eefast · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,8	—	%0,6	7 May 2024
39İzleyin	CVE-2024-35086İstismar yok	J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in BpmTaskFromMapper.xml .j2eefast · j2eefast · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,8	—	%0,5	23 May 2024
39İzleyin	CVE-2024-35084İstismar yok	J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysMsgPushMapper.xml.j2eefast · j2eefast · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,8	—	%0,4	23 May 2024
39İzleyin	CVE-2024-35091İstismar yok	J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysTenantMapper.xml.j2eefast · j2eefast · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,8	—	%0,4	23 May 2024
36İzleyin	CVE-2024-33146İstismar yok	J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the export function.j2eefast · j2eefast · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,1	—	%0,5	7 May 2024
35İzleyin	CVE-2024-33147İstismar yok	J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the authRoleList function.j2eefast · j2eefast · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%0,5	7 May 2024
35İzleyin	CVE-2024-33144İstismar yok	J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the findApplyedTasksPage function inj2eefast · j2eefast · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%0,5	7 May 2024
35İzleyin	CVE-2024-35083İstismar yok	J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysLoginInfoMapper.xml.j2eefast · j2eefast · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%0,4	23 May 2024
32İzleyin	CVE-2024-33149İstismar yok	J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the myProcessList function.j2eefast · j2eefast · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Yüksek8,1	—	%0,5	7 May 2024
32İzleyin	CVE-2024-35090İstismar yok	J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysUreportFileMapper.xml.j2eefast · j2eefast · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Yüksek8,2	—	%0,3	23 May 2024
30İzleyin	CVE-2024-33139İstismar yok	J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the findpage function.j2eefast · j2eefast · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Yüksek7,5	—	%0,5	7 May 2024
29İzleyin	CVE-2024-33148İstismar yok	J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the list function.j2eefast · j2eefast · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Yüksek7,3	—	%0,4	7 May 2024
25İzleyin	CVE-2024-35082İstismar yok	J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysOperLogMapper.xml.j2eefast · j2eefast · CWE-89 SQL enjeksiyonu	Orta6,3	—	%0,3	23 May 2024
21İzleyin	CVE-2023-2476İstismar yok	Dromara J2eeFAST Announcement cross site scriptingj2eefast · j2eefast · CWE-79 XSS	Orta5,4	—	%0,5	2 May 2023
21İzleyin	CVE-2023-2475İstismar yok	Dromara J2eeFAST System Message cross site scriptingj2eefast · j2eefast · CWE-79 XSS	Orta5,4	—	%0,5	2 May 2023
21İzleyin	CVE-2024-35085İstismar yok	J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in ProcessDefinitionMapper.xml.j2eefast · j2eefast · CWE-89 SQL enjeksiyonu	Orta5,4	—	%0,2	23 May 2024
21İzleyin	CVE-2024-33161İstismar yok	J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the unallocatedList() function.j2eefast · j2eefast · CWE-89 SQL enjeksiyonu	Orta5,3	—	%0,2	7 May 2024

CVE-2021-28890
39İzleyin
J2eeFAST 2.2.1 allows remote attackers to perform SQL injection via the (1) compId parameter to fast/sys/user/list, (2) deptId parameter to
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- SQL enjeksiyonu
j2eefast · j2eefast12 Ağu 2021
CVE-2024-45944
39İzleyin
In J2eeFAST <=2.7, the backend function has unsafe filtering, which allows an attacker to trigger certain sensitive functions resulting in a
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
j2eefast · j2eefast18 Eki 2024
CVE-2024-33164
39İzleyin
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the authUserList() function.
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- SQL enjeksiyonu
j2eefast · j2eefast7 May 2024
CVE-2024-33153
39İzleyin
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the commentList() function.
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- SQL enjeksiyonu
j2eefast · j2eefast7 May 2024
CVE-2024-33155
39İzleyin
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the getDeptList() function.
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- SQL enjeksiyonu
j2eefast · j2eefast7 May 2024
CVE-2024-35086
39İzleyin
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in BpmTaskFromMapper.xml .
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- SQL enjeksiyonu
j2eefast · j2eefast23 May 2024
CVE-2024-35084
39İzleyin
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysMsgPushMapper.xml.
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- SQL enjeksiyonu
j2eefast · j2eefast23 May 2024
CVE-2024-35091
39İzleyin
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysTenantMapper.xml.
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- SQL enjeksiyonu
j2eefast · j2eefast23 May 2024
CVE-2024-33146
36İzleyin
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the export function.
KritikCVSS 9,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- SQL enjeksiyonu
j2eefast · j2eefast7 May 2024
CVE-2024-33147
35İzleyin
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the authRoleList function.
YüksekCVSS 8,8İstismar yokEPSS %1
- SQL enjeksiyonu
j2eefast · j2eefast7 May 2024
CVE-2024-33144
35İzleyin
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the findApplyedTasksPage function in
YüksekCVSS 8,8İstismar yokEPSS %1
- SQL enjeksiyonu
j2eefast · j2eefast7 May 2024
CVE-2024-35083
35İzleyin
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysLoginInfoMapper.xml.
YüksekCVSS 8,8İstismar yokEPSS %0
- SQL enjeksiyonu
j2eefast · j2eefast23 May 2024
CVE-2024-33149
32İzleyin
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the myProcessList function.
YüksekCVSS 8,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- SQL enjeksiyonu
j2eefast · j2eefast7 May 2024
CVE-2024-35090
32İzleyin
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysUreportFileMapper.xml.
YüksekCVSS 8,2İstismar yokEPSS %0
- Kimlik doğrulamasız
- SQL enjeksiyonu
j2eefast · j2eefast23 May 2024
CVE-2024-33139
30İzleyin
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the findpage function.
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- SQL enjeksiyonu
j2eefast · j2eefast7 May 2024
CVE-2024-33148
29İzleyin
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the list function.
YüksekCVSS 7,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- SQL enjeksiyonu
j2eefast · j2eefast7 May 2024
CVE-2024-35082
25İzleyin
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysOperLogMapper.xml.
OrtaCVSS 6,3İstismar yokEPSS %0
- SQL enjeksiyonu
j2eefast · j2eefast23 May 2024
CVE-2023-2476
21İzleyin
Dromara J2eeFAST Announcement cross site scripting
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
j2eefast · j2eefast2 May 2023
CVE-2023-2475
21İzleyin
Dromara J2eeFAST System Message cross site scripting
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
j2eefast · j2eefast2 May 2023
CVE-2024-35085
21İzleyin
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in ProcessDefinitionMapper.xml.
OrtaCVSS 5,4İstismar yokEPSS %0
- SQL enjeksiyonu
j2eefast · j2eefast23 May 2024
CVE-2024-33161
21İzleyin
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the unallocatedList() function.
OrtaCVSS 5,3İstismar yokEPSS %0
- SQL enjeksiyonu
j2eefast · j2eefast7 May 2024