Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:jeewms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductJeewms (f804fb84-e69a-5796-a6dd-ced97eaf1c0b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-5390 vulnerable 2026-06-08 07:37:24.145732 JeeWMS File filedeal.do filedeal access control
MEDIUM (6.3)
A vulnerability, which was classified as critical, was found in JeeWMS up to 20250504. This affects the function filedeal of the file /systemController/filedeal.do of the component File Handler. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. This product does not use versioning. This is why information about affected and unaffected releases are unavailable.
Published: 2025-05-31T19:00:08.306Z
Updated: 2025-06-02T15:46:46.682Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5389 vulnerable 2026-06-08 07:37:24.145062 JeeWMS File generateController.do dogenerateOne2Many access control
MEDIUM (6.3)
A vulnerability, which was classified as critical, has been found in JeeWMS up to 20250504. Affected by this issue is the function dogenerateOne2Many of the file /generateController.do?dogenerateOne2Many of the component File Handler. The manipulation leads to improper access controls. The attack may be launched remotely. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.
Published: 2025-05-31T18:31:06.868Z
Updated: 2025-06-02T15:46:55.361Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5388 vulnerable 2026-06-08 07:37:24.144189 JeeWMS generateController.do dogenerate sql injection
MEDIUM (6.3)
A vulnerability classified as critical was found in JeeWMS up to 20250504. Affected by this vulnerability is the function dogenerate of the file /generateController.do?dogenerate. The manipulation leads to sql injection. The attack can be launched remotely. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.
Published: 2025-05-31T18:00:09.009Z
Updated: 2025-06-02T15:47:03.627Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5387 vulnerable 2026-06-08 07:37:24.143556 JeeWMS File generateController.do dogenerate access control
MEDIUM (6.3)
A vulnerability classified as critical has been found in JeeWMS up to 20250504. Affected is the function dogenerate of the file /generateController.do?dogenerate of the component File Handler. The manipulation leads to improper access controls. It is possible to launch the attack remotely. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.
Published: 2025-05-31T17:31:06.860Z
Updated: 2025-06-02T15:47:09.497Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5386 vulnerable 2026-06-08 07:37:24.142805 JeeWMS cgformTransController.do transEditor sql injection
MEDIUM (6.3)
A vulnerability was found in JeeWMS up to 20250504. It has been rated as critical. This issue affects the function transEditor of the file /cgformTransController.do?transEditor. The manipulation leads to sql injection. The attack may be initiated remotely. This product does not use versioning. This is why information about affected and unaffected releases are unavailable.
Published: 2025-05-31T17:00:07.691Z
Updated: 2025-06-02T15:47:15.106Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5385 vulnerable 2026-06-08 07:37:24.141889 JeeWMS cgformTemplateController.do doAdd path traversal
MEDIUM (6.3)
A vulnerability was found in JeeWMS up to 20250504. It has been declared as critical. This vulnerability affects the function doAdd of the file /cgformTemplateController.do?doAdd. The manipulation leads to path traversal. The attack can be initiated remotely. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.
Published: 2025-05-31T16:31:06.803Z
Updated: 2025-06-02T15:47:21.636Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5384 vulnerable 2026-06-08 07:37:24.138469 JeeWMS cgAutoListController.do CgAutoListController sql injection
MEDIUM (6.3)
A vulnerability was found in JeeWMS up to 20250504. It has been classified as critical. This affects the function CgAutoListController of the file /cgAutoListController.do?datagrid. The manipulation leads to sql injection. It is possible to initiate the attack remotely. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.
Published: 2025-05-31T16:00:09.839Z
Updated: 2025-06-02T15:47:27.144Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.