Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

JCD — Vulnerabilities & Security Advisories 11

Browse all 11 CVE security advisories affecting JCD. AI-powered Chinese analysis, POCs, and references for each vulnerability.

JCD is a widely used enterprise software solution primarily serving business process automation and workflow management. Historically, vulnerabilities in JCD have frequently included remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from improper input validation and access control weaknesses. The product has faced several critical security incidents, including a 2022 vulnerability chain that allowed unauthenticated attackers to achieve system compromise. With 8 CVEs currently on record, security researchers note that while JCD's core functionality remains robust, its historical vulnerability patterns suggest a need for enhanced input sanitization and privilege management to mitigate persistent security risks.

Top products by JCD: Windu CMS
CVE ID Title CVSS Severity Published
CVE-2026-57311 Unrestricted Upload of File with Dangerous Type in Windu CMS — Windu CMS CWE-434 5.3 Medium 2026-07-20
CVE-2026-57310 Weak password hashing in Windu CMS — Windu CMS CWE-916 - - 2026-07-20
CVE-2026-57309 Blind SQL Injection in Windu CMS — Windu CMS CWE-89 - - 2026-07-20
CVE-2025-59116 User enumeration in Windu CMS — Windu CMS CWE-204 5.3AI Medium AI 2025-11-18
CVE-2025-59111 Broken Access Control in Windu CMS — Windu CMS CWE-863 6.5AI Medium AI 2025-11-18
CVE-2025-59117 Multiple Stored XSS in Windu CMS — Windu CMS CWE-79 4.8AI Medium AI 2025-11-18
CVE-2025-59115 Stored XSS in Windu CMS — Windu CMS CWE-79 5.4AI Medium AI 2025-11-18
CVE-2025-59114 Cross-Site Request Forgery in Windu CMS — Windu CMS CWE-352 8.8AI High AI 2025-11-18
CVE-2025-59113 Bruteforce Protection Bypass in Windu CMS — Windu CMS CWE-307 9.4AI Critical AI 2025-11-18
CVE-2025-59112 Cross-Site Request Forgery in Windu CMS — Windu CMS CWE-352 4.3AI Medium AI 2025-11-18
CVE-2025-59110 Cross-Site Request Forgery in Windu CMS — Windu CMS CWE-352 8.8AI High AI 2025-11-18

This page lists every published CVE security advisory associated with JCD. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.