JeeWMS vulnerabilities
CVEs whose affected-version data names the JeeWMS package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
10 CVEsRSS
CVE-2021-48015High· 7.5JeeWMS Path Traversal via showOrDownByurl.do
JeeWMS before commit 0a610e8 contains an unauthenticated path traversal vulnerability that allows remote attackers to read arbitrary files via the dbPath parameter. Attackers can send GET requests to /systemController/showOrDownByurl.do …
CVE-2026-108782Medium· 6.3PoCA weakness has been identified in erzhongxmu JEEWMS up to 2026.09.27-W39
A weakness has been identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this issue is the function CommonServiceImpl.getAutoList of the file src/main/java/org/jeecgframework/core/common/service/impl/CommonServiceImpl.java o…
CVE-2026-108781Medium· 6.3PoCA security flaw has been discovered in erzhongxmu JEEWMS up to 2026.09.27-W39
A security flaw has been discovered in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this vulnerability is the function WmToMoveGoodsController.list of the file src/main/java/com/zzjee/wm/controller/WmToMoveGoodsController.java of …
CVE-2026-108779Medium· 6.3A vulnerability was identified in erzhongxmu JEEWMS up to 2026.09.27-W39
A vulnerability was identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected is the function WmSttInGoodsController.list of the file src/main/java/com/zzjee/wm/controller/WmSttInGoodsController.java. Such manipulation of the argume…
CVE-2026-108778Medium· 6.3A vulnerability was determined in erzhongxmu JEEWMS up to 2026.09.27-W39
A vulnerability was determined in erzhongxmu JEEWMS up to 2026.09.27-W39. This impacts the function WmInQmIController.list of the file src/main/java/com/zzjee/wm/controller/WmInQmIController.java of the component Inbound Quality Check Pd…
CVE-2026-108777Medium· 6.3PoCA vulnerability was found in erzhongxmu JEEWMS up to 2026.09.27-W39
A vulnerability was found in erzhongxmu JEEWMS up to 2026.09.27-W39. This affects the function WvGiController.list of the file src/main/java/com/zzjee/wmapi/controller/WvGiController.java. The manipulation of the argument searchstr resul…
CVE-2026-108775Medium· 6.3PoCA vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W39
A vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The impacted element is the function WvNoticeController.list of the file com/zzjee/wmapi/controller/WvNoticeController.java of the component Search Endpoint. The m…
CVE-2026-108774Medium· 6.3A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39
A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The affected element is the function getbinall/getbinallagv of the file src/main/java/com/zzjee/md/controller/MdBinController.java. Executing a manipulation of the argument…
CVE-2026-108773Medium· 6.3A vulnerability was detected in erzhongxmu JEEWMS up to 2026.09.27-W39
A vulnerability was detected in erzhongxmu JEEWMS up to 2026.09.27-W39. Impacted is the function docheck of the file src/main/java/com/zzjee/wm/controller/WmOmNoticeHController.java. Performing a manipulation of the argument goodscode re…
CVE-2026-108684Medium· 6.3PoCA vulnerability was detected in erzhongxmu Jeewms up to 3.7
A vulnerability was detected in erzhongxmu Jeewms up to 3.7. This affects the function getTreeData of the file src/main/java/com/jeecg/demo/controller/JeecgFormDemoController.java of the component Autocomplete Data Handler. Performing a …