CVE-2024-35090

Description

References

• cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc · Third Party Advisory
• j2eefast.com · Product

Weitere Schwachstellen in j2eefast

• CVE-2024-45944KRITISCH 9.8In J2eeFAST <=2.7, the backend function has unsafe filtering, which allows an attacker to trigger certain sensitive functions resulting in a…
• CVE-2024-35091KRITISCH 9.8J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysTenantMapper.xml.
• CVE-2024-35086KRITISCH 9.8J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in BpmTaskFromMapper.xml .
• CVE-2024-35085MITTEL 5.4J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in ProcessDefinitionMapper.xml.
• CVE-2024-35084KRITISCH 9.8J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysMsgPushMapper.xml.