📦 Jepaas

by Ketr

🔍 What is Jepaas?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2024-46535

CRITICAL CVSS 9.8 Oct 14, 2024

Jepaas v7.2.8 contains a SQL injection vulnerability in the orderSQL parameter at /homePortal/loadUserMsg endpoint. This allows attackers to execute arbitrary SQL commands on the database. All users r...

CVE-2024-51165

HIGH CVSS 7.5 Dec 10, 2024

This SQL injection vulnerability in JEPAAS 7.2.8 allows remote attackers to execute arbitrary SQL queries through the dateVal parameter in the /je/rbac/rbac/loadLoginCount endpoint. Successful exploit...