Filtered by vendor Ketr
Subscribe
Total
3 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2024-46535 | 1 Ketr | 1 Jepaas | 2025-07-03 | N/A | 9.8 CRITICAL |
| Jepaas v7.2.8 was discovered to contain a SQL injection vulnerability via the orderSQL parameter at /homePortal/loadUserMsg. | |||||
| CVE-2024-51164 | 1 Ketr | 1 Jepaas | 2025-06-24 | N/A | 9.1 CRITICAL |
| Multiple parameters have SQL injection vulnerability in JEPaaS 7.2.8 via /je/login/btnLog/insertBtnLog, which could allow a remote user to submit a specially crafted query, allowing an attacker to retrieve all the information stored in the DB. | |||||
| CVE-2024-51165 | 1 Ketr | 1 Jepaas | 2025-06-24 | N/A | 7.5 HIGH |
| SQL injection vulnerability in JEPAAS7.2.8, via /je/rbac/rbac/loadLoginCount in the dateVal parameter, which could allow a remote user to submit a specially crafted query, allowing an attacker to retrieve all the information stored in the DB. | |||||