Browse all 10 CVE security advisories affecting ZeroWdd. AI-powered Chinese analysis, POCs, and references for each vulnerability.
ZeroWdd develops enterprise vulnerability management solutions focused on identifying and mitigating security risks in web applications and APIs. Historically, the product has been associated with vulnerabilities including remote code execution, cross-site scripting, and privilege escalation flaws, accounting for 10 CVEs to date. While no major public security incidents have been documented, ZeroWdd's architecture has demonstrated susceptibility to input validation bypasses and insecure direct object references. The platform's scanning engine has shown inconsistent detection capabilities for complex business logic vulnerabilities, though it maintains adequate coverage for common OWASP Top 10 issues.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2024-13192 | ZeroWdd myblog BlogController.java update cross site scripting — myblog CWE-79 | 3.5 | Low | 2025-01-08 |
| CVE-2024-13191 | ZeroWdd myblog uploadController.java upload unrestricted upload — myblog CWE-434 | 6.3 | Medium | 2025-01-08 |
| CVE-2024-13190 | ZeroWdd myblog BlogMapper.xml xml injection — myblog CWE-91 | 6.3 | Medium | 2025-01-08 |
| CVE-2024-13189 | ZeroWdd myblog MyBlogMvcConfig.java permission — myblog CWE-275 | 7.3 | High | 2025-01-08 |
This page lists every published CVE security advisory associated with ZeroWdd. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.