Easy7 Integrated Management Platform
Approved changes feed: RSS · Atom
cpe:2.3:a:tiandy:easy7_integrated_management_platform:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Tiandy (39e2c9e4-6c06-53c0-b4b5-5c5aceca2c4f) |
|---|---|
| Product | Easy7 Integrated Management Platform (1ea00ce6-388b-59ae-bdf1-c92ca707d5c0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-9466 |
vulnerable | 2026-06-08 08:08:58.977352 |
Tiandy Easy7 Integrated Management Platform API Endpoint updateUserPassword password recovery
MEDIUM (5.3)
A vulnerability was determined in Tiandy Easy7 Integrated Management Platform 7.17.0. This issue affects some unknown processing of the file /rest/user/updateUserPassword of the component API Endpoint. Executing a manipulation can lead to weak password recovery. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-05-25T14:30:37.779Z
Updated: 2026-05-28T12:51:36.527Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9465 |
vulnerable | 2026-06-08 08:08:58.977157 |
Tiandy Easy7 Integrated Management Platform GetDBDataEx.jsp sql injection
HIGH (7.3)
A vulnerability was found in Tiandy Easy7 Integrated Management Platform 7.17.0. This vulnerability affects unknown code of the file /Easy7/apps/WebService/GetDBDataEx.jsp. Performing a manipulation of the argument strTBName results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-05-25T14:15:38.136Z
Updated: 2026-05-26T13:06:57.964Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7698 |
vulnerable | 2026-06-08 08:08:57.586843 |
Tiandy Easy7 Integrated Management Platform updateDbBackupInfo os command injection
HIGH (7.3)
A vulnerability was identified in Tiandy Easy7 Integrated Management Platform 7.17.0. Affected by this vulnerability is an unknown functionality of the file /Easy7/rest/systemInfo/updateDbBackupInfo. Such manipulation of the argument week leads to os command injection. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-05-03T13:30:40.287Z
Updated: 2026-05-04T13:03:46.060Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4585 |
vulnerable | 2026-06-08 08:05:13.560729 |
Tiandy Easy7 Integrated Management Platform Configuration ImportSystemConfiguration.jsp os command injection
CRITICAL (9.8)
A vulnerability has been found in Tiandy Easy7 Integrated Management Platform up to 7.17.0. This vulnerability affects unknown code of the file /Easy7/apps/WebService/ImportSystemConfiguration.jsp of the component Configuration Handler. The manipulation of the argument File leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-03-23T11:15:06.466Z
Updated: 2026-03-23T16:38:26.005Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4289 |
vulnerable | 2026-06-08 08:05:13.135492 |
Tiandy Easy7 Integrated Management Platform getRecByTemplateId sql injection
HIGH (7.3)
A security vulnerability has been detected in Tiandy Easy7 Integrated Management Platform up to 7.17.0. This affects an unknown function of the file /rest/preSetTemplate/getRecByTemplateId. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-03-17T00:03:10.717Z
Updated: 2026-03-17T13:32:52.355Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4288 |
vulnerable | 2026-06-08 08:05:13.135139 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4287 |
vulnerable | 2026-06-08 08:05:13.134824 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4221 |
vulnerable | 2026-06-08 08:05:13.034878 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4187 |
vulnerable | 2026-06-08 08:05:12.763829 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.