Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

erzhongxmu — Vulnerabilities & Security Advisories 15

Browse all 15 CVE security advisories affecting erzhongxmu. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Erzhongxmu operates primarily in industrial control systems and manufacturing automation, with core use cases involving programmable logic controllers and SCADA systems. Historically, this entity has been associated with multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues in their products. Their security posture has been marked by insufficient input validation and inadequate access controls. The four CVEs attributed to them highlight consistent patterns of insecure design, particularly in web interfaces and communication protocols. No major public security incidents have been documented, though the recurring nature of their vulnerabilities suggests systemic security challenges in their development lifecycle.

Found 15 results / 15 Clear Filters
Top products by erzhongxmu: Jeewms
CVE ID Title CVSS Severity Published
CVE-2026-108782 erzhongxmu JEEWMS Autocomplete CommonServiceImpl.java CommonServiceImpl.getAutoList sql injection — JEEWMS CWE-89 6.3 Medium 2026-10-12
CVE-2026-108781 erzhongxmu JEEWMS PDA WmToMoveGoodsController.java WmToMoveGoodsController.list sql injection — JEEWMS CWE-89 6.3 Medium 2026-10-12
CVE-2026-108779 erzhongxmu JEEWMS WmSttInGoodsController.java WmSttInGoodsController.list sql injection — JEEWMS CWE-89 6.3 Medium 2026-10-12
CVE-2026-108778 erzhongxmu JEEWMS Inbound Quality Check Pda WmInQmIController.java WmInQmIController.list sql injection — JEEWMS CWE-89 6.3 Medium 2026-10-11
CVE-2026-108777 erzhongxmu JEEWMS WvGiController.java WvGiController.list sql injection — JEEWMS CWE-89 6.3 Medium 2026-10-11
CVE-2026-108775 erzhongxmu JEEWMS Search Endpoint WvNoticeController.java WvNoticeController.list sql injection — JEEWMS CWE-89 6.3 Medium 2026-10-11
CVE-2026-108774 erzhongxmu JEEWMS MdBinController.java getbinallagv sql injection — JEEWMS CWE-89 6.3 Medium 2026-10-11
CVE-2026-108773 erzhongxmu JEEWMS WmOmNoticeHController.java docheck sql injection — JEEWMS CWE-89 6.3 Medium 2026-10-11
CVE-2026-108684 erzhongxmu Jeewms Autocomplete Data JeecgFormDemoController.java getTreeData sql injection — Jeewms CWE-89 6.3 Medium 2026-10-11
CVE-2026-11458 erzhongxmu JeeWMS Boot Actuator Endpoint actuator information disclosure — JeeWMS CWE-200 5.3 Medium 2026-06-07
CVE-2026-11457 erzhongxmu JeeWMS JimuReport test-connection Endpoint testConnection injection — JeeWMS CWE-74 7.3 High 2026-06-07
CVE-2026-3028 erzhongxmu JEEWMS JeecgListDemoController.java doAdd cross site scripting — JEEWMS CWE-79 4.3 Medium 2026-02-23
CVE-2026-3027 erzhongxmu JEEWMS UEditor getContent.jsp cross site scripting — JEEWMS CWE-79 4.3 Medium 2026-02-23
CVE-2026-3026 erzhongxmu JEEWMS UEditor getRemoteImage.jsp server-side request forgery — JEEWMS CWE-918 7.3 High 2026-02-23
CVE-2024-11251 erzhongxmu Jeewms AuthInterceptor cgReportController.do sql injection — Jeewms CWE-89 6.3 Medium 2024-11-15

This page lists every published CVE security advisory associated with erzhongxmu. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.