Browse all 5 CVE security advisories affecting eoxia. AI-powered Chinese analysis, POCs, and references for each vulnerability.
EOXIA provides enterprise resource planning (ERP) solutions for supply chain management and logistics operations. Historically, the platform has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues, with five CVEs documented to date. Security assessments reveal common weaknesses in authentication mechanisms and input validation across its web interfaces. While no major public security incidents have been reported, the consistent pattern of vulnerabilities in core business logic functions suggests potential risks for organizations relying on these systems for critical operations.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-4004 | Task Manager <= 3.0.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'task_id' Parameter — Task Manager CWE-94 | 6.5 | Medium | 2026-03-21 |
| CVE-2026-2351 | Task Manager <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Read — Task Manager CWE-73 | 6.5 | Medium | 2026-03-21 |
| CVE-2015-10135 | WPshop 2 – E-Commerce < 1.3.9.6 - Arbitrary File Upload — WPshop 2 – E-Commerce CWE-434 | 9.8 | Critical | 2025-07-19 |
| CVE-2025-3852 | WPshop 2 – E-Commerce 2.0.0 - 2.6.0 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover — WPshop 2 – E-Commerce CWE-269 | 8.8 | High | 2025-05-07 |
| CVE-2025-3853 | WPshop 2 – E-Commerce 2.0.0 - 2.6.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Key Generation — WPshop 2 – E-Commerce CWE-639 | 6.5 | Medium | 2025-05-07 |
This page lists every published CVE security advisory associated with eoxia. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.