Total
3 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2024-46535 | 1 Ketr | 1 Jepaas | 2025-07-03 | N/A | 9.8 CRITICAL |
Jepaas v7.2.8 was discovered to contain a SQL injection vulnerability via the orderSQL parameter at /homePortal/loadUserMsg. | |||||
CVE-2024-51164 | 1 Ketr | 1 Jepaas | 2025-06-24 | N/A | 9.1 CRITICAL |
Multiple parameters have SQL injection vulnerability in JEPaaS 7.2.8 via /je/login/btnLog/insertBtnLog, which could allow a remote user to submit a specially crafted query, allowing an attacker to retrieve all the information stored in the DB. | |||||
CVE-2024-51165 | 1 Ketr | 1 Jepaas | 2025-06-24 | N/A | 7.5 HIGH |
SQL injection vulnerability in JEPAAS7.2.8, via /je/rbac/rbac/loadLoginCount in the dateVal parameter, which could allow a remote user to submit a specially crafted query, allowing an attacker to retrieve all the information stored in the DB. |