Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Jeewms — Vulnerabilities & Security Advisories 18

All 18 CVE vulnerabilities found in Jeewms, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities affecting the web-based file server product known as Jeewms. It collects a comprehensive inventory of flaws, including buffer overflows, authentication bypasses, and cross-site scripting issues reported over the past decade. Readers can use this resource to track the vendor's security advisories, analyze the impact of specific weakness classes on the product, and review the full vulnerability history of Jeewms. The data is organized chronologically to facilitate trend analysis.

Vendor: erzhongxmu

CVE ID Title CVSS Severity Published
CVE-2026-11458 erzhongxmu JeeWMS Boot Actuator Endpoint actuator information disclosure CWE-200 5.3 Medium 2026-06-07
CVE-2026-11457 erzhongxmu JeeWMS JimuReport test-connection Endpoint testConnection injection CWE-74 7.3 High 2026-06-07
CVE-2026-3028 erzhongxmu JEEWMS JeecgListDemoController.java doAdd cross site scripting CWE-79 4.3 Medium 2026-02-23
CVE-2026-3027 erzhongxmu JEEWMS UEditor getContent.jsp cross site scripting CWE-79 4.3 Medium 2026-02-23
CVE-2026-3026 erzhongxmu JEEWMS UEditor getRemoteImage.jsp server-side request forgery CWE-918 7.3 High 2026-02-23
CVE-2025-5390 JeeWMS File filedeal.do filedeal access control CWE-284 6.3 Medium 2025-05-31
CVE-2025-5389 JeeWMS File generateController.do dogenerateOne2Many access control CWE-284 6.3 Medium 2025-05-31
CVE-2025-5388 JeeWMS generateController.do dogenerate sql injection CWE-89 6.3 Medium 2025-05-31
CVE-2025-5387 JeeWMS File generateController.do dogenerate access control CWE-284 6.3 Medium 2025-05-31
CVE-2025-5386 JeeWMS cgformTransController.do transEditor sql injection CWE-89 6.3 Medium 2025-05-31
CVE-2025-5385 JeeWMS cgformTemplateController.do doAdd path traversal CWE-22 6.3 Medium 2025-05-31
CVE-2025-5384 JeeWMS cgAutoListController.do CgAutoListController sql injection CWE-89 6.3 Medium 2025-05-31
CVE-2025-0392 Guangzhou Huayi Intelligent Technology Jeewms graphReportController.do datagridGraph sql injection CWE-89 6.3 Medium 2025-01-11
CVE-2025-0391 Guangzhou Huayi Intelligent Technology Jeewms CgFormBuildController. java saveOrUpdate sql injection CWE-89 6.3 Medium 2025-01-11
CVE-2025-0390 Guangzhou Huayi Intelligent Technology Jeewms wmOmNoticeHController.do path traversal CWE-24 5.3 Medium 2025-01-11
CVE-2024-12347 Guangzhou Huayi Intelligent Technology Jeewms Druid Monitoring Interface index.html improper authorization CWE-285 5.3 Medium 2024-12-08
CVE-2024-11961 Guangzhou Huayi Intelligent Technology Jeewms WmOmNoticeHController.java preHandle information disclosure CWE-200 5.3 Medium 2024-11-28
CVE-2024-11251 erzhongxmu Jeewms AuthInterceptor cgReportController.do sql injection CWE-89 6.3 Medium 2024-11-15

All 18 known CVE vulnerabilities affecting Jeewms with full Chinese analysis, references, and POCs where available.