{"schema_version":1,"title":"Erzhongxmu JeeWMS vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 11 vulnerabilities in Erzhongxmu JeeWMS: 0 in the last 7 days and 9 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-108782, was published on 12 October 2026. 7 vulnerabilities in the last four weeks, up 250% on the four before (2).","url":"https://junglewise.ai/threats/technologies/jeewms","json_url":"https://junglewise.ai/threats/technologies/jeewms.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/jeewms","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":1,"all_time":11,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":9,"last_365_days":11},"latest":[{"cve":"CVE-2026-108782","cvss":6.3,"epss":0.0019,"slug":"cve-2026-108782-a-weakness-has-been-identified-in-erzhongxmu-jeewms-up-to-2026","title":"erzhongxmu JEEWMS SQL injection in autocomplete handler","severity":"medium","exploited":false,"published_at":"2026-10-12T02:16:56.04+00:00","url":"https://junglewise.ai/threats/cve-2026-108782-a-weakness-has-been-identified-in-erzhongxmu-jeewms-up-to-2026"},{"cve":"CVE-2026-108781","cvss":6.3,"epss":0.002,"slug":"cve-2026-108781-a-security-flaw-has-been-discovered-in-erzhongxmu-jeewms-up-to","title":"erzhongxmu JEEWMS SQL injection in PDA interface","severity":"medium","exploited":false,"published_at":"2026-10-12T01:16:29.783+00:00","url":"https://junglewise.ai/threats/cve-2026-108781-a-security-flaw-has-been-discovered-in-erzhongxmu-jeewms-up-to"},{"cve":"CVE-2026-108779","cvss":6.3,"epss":0.0019,"slug":"cve-2026-108779-a-vulnerability-was-identified-in-erzhongxmu-jeewms-up-to-2026","title":"erzhongxmu JEEWMS SQL injection in WmSttInGoodsController","severity":"medium","exploited":false,"published_at":"2026-10-12T01:16:29.617+00:00","url":"https://junglewise.ai/threats/cve-2026-108779-a-vulnerability-was-identified-in-erzhongxmu-jeewms-up-to-2026"},{"cve":"CVE-2026-108778","cvss":6.3,"epss":0.0019,"slug":"cve-2026-108778-a-vulnerability-was-determined-in-erzhongxmu-jeewms-up-to-2026","title":"erzhongxmu JEEWMS SQL injection in inbound quality check","severity":"medium","exploited":false,"published_at":"2026-10-12T00:17:01.7+00:00","url":"https://junglewise.ai/threats/cve-2026-108778-a-vulnerability-was-determined-in-erzhongxmu-jeewms-up-to-2026"},{"cve":"CVE-2026-108777","cvss":6.3,"epss":0.0019,"slug":"cve-2026-108777-a-vulnerability-was-found-in-erzhongxmu-jeewms-up-to-2026-09-27","title":"erzhongxmu JEEWMS SQL injection in WvGiController","severity":"medium","exploited":false,"published_at":"2026-10-12T00:17:01.533+00:00","url":"https://junglewise.ai/threats/cve-2026-108777-a-vulnerability-was-found-in-erzhongxmu-jeewms-up-to-2026-09-27"},{"cve":"CVE-2026-108775","cvss":6.3,"epss":0.003,"slug":"cve-2026-108775-a-vulnerability-has-been-found-in-erzhongxmu-jeewms-up-to-2026","title":"erzhongxmu JEEWMS SQL injection in search endpoint","severity":"medium","exploited":false,"published_at":"2026-10-12T00:17:01.37+00:00","url":"https://junglewise.ai/threats/cve-2026-108775-a-vulnerability-has-been-found-in-erzhongxmu-jeewms-up-to-2026"},{"cve":"CVE-2026-108774","cvss":6.3,"epss":0.003,"slug":"cve-2026-108774-a-flaw-has-been-found-in-erzhongxmu-jeewms-up-to-2026-09-27-w39","title":"erzhongxmu JEEWMS SQL injection in MdBinController","severity":"medium","exploited":false,"published_at":"2026-10-12T00:17:01.2+00:00","url":"https://junglewise.ai/threats/cve-2026-108774-a-flaw-has-been-found-in-erzhongxmu-jeewms-up-to-2026-09-27-w39"},{"cve":"CVE-2026-108773","cvss":6.3,"epss":0.0019,"slug":"cve-2026-108773-a-vulnerability-was-detected-in-erzhongxmu-jeewms-up-to-2026-09","title":"erzhongxmu JEEWMS SQL injection in WmOmNoticeHController","severity":"medium","exploited":false,"published_at":"2026-10-11T23:16:56.917+00:00","url":"https://junglewise.ai/threats/cve-2026-108773-a-vulnerability-was-detected-in-erzhongxmu-jeewms-up-to-2026-09"},{"cve":"CVE-2026-108684","cvss":6.3,"epss":0.0026,"slug":"cve-2026-108684-a-vulnerability-was-detected-in-erzhongxmu-jeewms-up-to-3-7-this","title":"erzhongxmu Jeewms SQL injection in autocomplete handler","severity":"medium","exploited":false,"published_at":"2026-10-11T15:16:52.947+00:00","url":"https://junglewise.ai/threats/cve-2026-108684-a-vulnerability-was-detected-in-erzhongxmu-jeewms-up-to-3-7-this"},{"cve":"CVE-2026-11458","cvss":5.3,"slug":"cve-2026-11458-erzhongxmu-jeewms-information-disclosure-in-boot-actuator","title":"erzhongxmu JeeWMS information disclosure in Boot Actuator Endpoint","severity":"medium","exploited":false,"published_at":"2026-06-07T09:16:22.05+00:00","url":"https://junglewise.ai/threats/cve-2026-11458-erzhongxmu-jeewms-information-disclosure-in-boot-actuator"},{"cve":"CVE-2026-11457","cvss":7.3,"slug":"cve-2026-11457-erzhongxmu-jeewms-remote-code-execution-in-jimureport","title":"erzhongxmu JeeWMS remote code execution in JimuReport testConnection","severity":"high","exploited":false,"published_at":"2026-06-07T09:16:21.843+00:00","url":"https://junglewise.ai/threats/cve-2026-11457-erzhongxmu-jeewms-remote-code-execution-in-jimureport"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":7},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[],"technology":{"hub":true,"name":"Erzhongxmu JeeWMS","slug":"jeewms","vendor":{"hub":true,"name":"Erzhongxmu","slug":"erzhongxmu","url":"https://junglewise.ai/threats/vendors/erzhongxmu"},"aliases":[],"category":"application","homepage":"https://gitee.com/erzhongxmu/jeewms","repo_url":"https://github.com/erzhongxmu/jeewms","description":"JeeWMS is an open-source warehouse management system based on the Jeecg framework.","url":"https://junglewise.ai/threats/technologies/jeewms"},"most_severe":[{"cve":"CVE-2026-11457","cvss":7.3,"slug":"cve-2026-11457-erzhongxmu-jeewms-remote-code-execution-in-jimureport","title":"erzhongxmu JeeWMS remote code execution in JimuReport testConnection","severity":"high","exploited":false,"published_at":"2026-06-07T09:16:21.843+00:00","url":"https://junglewise.ai/threats/cve-2026-11457-erzhongxmu-jeewms-remote-code-execution-in-jimureport"},{"cve":"CVE-2026-108775","cvss":6.3,"epss":0.003,"slug":"cve-2026-108775-a-vulnerability-has-been-found-in-erzhongxmu-jeewms-up-to-2026","title":"erzhongxmu JEEWMS SQL injection in search endpoint","severity":"medium","exploited":false,"published_at":"2026-10-12T00:17:01.37+00:00","url":"https://junglewise.ai/threats/cve-2026-108775-a-vulnerability-has-been-found-in-erzhongxmu-jeewms-up-to-2026"},{"cve":"CVE-2026-108774","cvss":6.3,"epss":0.003,"slug":"cve-2026-108774-a-flaw-has-been-found-in-erzhongxmu-jeewms-up-to-2026-09-27-w39","title":"erzhongxmu JEEWMS SQL injection in MdBinController","severity":"medium","exploited":false,"published_at":"2026-10-12T00:17:01.2+00:00","url":"https://junglewise.ai/threats/cve-2026-108774-a-flaw-has-been-found-in-erzhongxmu-jeewms-up-to-2026-09-27-w39"},{"cve":"CVE-2026-108684","cvss":6.3,"epss":0.0026,"slug":"cve-2026-108684-a-vulnerability-was-detected-in-erzhongxmu-jeewms-up-to-3-7-this","title":"erzhongxmu Jeewms SQL injection in autocomplete handler","severity":"medium","exploited":false,"published_at":"2026-10-11T15:16:52.947+00:00","url":"https://junglewise.ai/threats/cve-2026-108684-a-vulnerability-was-detected-in-erzhongxmu-jeewms-up-to-3-7-this"},{"cve":"CVE-2026-108781","cvss":6.3,"epss":0.002,"slug":"cve-2026-108781-a-security-flaw-has-been-discovered-in-erzhongxmu-jeewms-up-to","title":"erzhongxmu JEEWMS SQL injection in PDA interface","severity":"medium","exploited":false,"published_at":"2026-10-12T01:16:29.783+00:00","url":"https://junglewise.ai/threats/cve-2026-108781-a-security-flaw-has-been-discovered-in-erzhongxmu-jeewms-up-to"},{"cve":"CVE-2026-108782","cvss":6.3,"epss":0.0019,"slug":"cve-2026-108782-a-weakness-has-been-identified-in-erzhongxmu-jeewms-up-to-2026","title":"erzhongxmu JEEWMS SQL injection in autocomplete handler","severity":"medium","exploited":false,"published_at":"2026-10-12T02:16:56.04+00:00","url":"https://junglewise.ai/threats/cve-2026-108782-a-weakness-has-been-identified-in-erzhongxmu-jeewms-up-to-2026"},{"cve":"CVE-2026-108779","cvss":6.3,"epss":0.0019,"slug":"cve-2026-108779-a-vulnerability-was-identified-in-erzhongxmu-jeewms-up-to-2026","title":"erzhongxmu JEEWMS SQL injection in WmSttInGoodsController","severity":"medium","exploited":false,"published_at":"2026-10-12T01:16:29.617+00:00","url":"https://junglewise.ai/threats/cve-2026-108779-a-vulnerability-was-identified-in-erzhongxmu-jeewms-up-to-2026"},{"cve":"CVE-2026-108778","cvss":6.3,"epss":0.0019,"slug":"cve-2026-108778-a-vulnerability-was-determined-in-erzhongxmu-jeewms-up-to-2026","title":"erzhongxmu JEEWMS SQL injection in inbound quality check","severity":"medium","exploited":false,"published_at":"2026-10-12T00:17:01.7+00:00","url":"https://junglewise.ai/threats/cve-2026-108778-a-vulnerability-was-determined-in-erzhongxmu-jeewms-up-to-2026"},{"cve":"CVE-2026-108777","cvss":6.3,"epss":0.0019,"slug":"cve-2026-108777-a-vulnerability-was-found-in-erzhongxmu-jeewms-up-to-2026-09-27","title":"erzhongxmu JEEWMS SQL injection in WvGiController","severity":"medium","exploited":false,"published_at":"2026-10-12T00:17:01.533+00:00","url":"https://junglewise.ai/threats/cve-2026-108777-a-vulnerability-was-found-in-erzhongxmu-jeewms-up-to-2026-09-27"},{"cve":"CVE-2026-108773","cvss":6.3,"epss":0.0019,"slug":"cve-2026-108773-a-vulnerability-was-detected-in-erzhongxmu-jeewms-up-to-2026-09","title":"erzhongxmu JEEWMS SQL injection in WmOmNoticeHController","severity":"medium","exploited":false,"published_at":"2026-10-11T23:16:56.917+00:00","url":"https://junglewise.ai/threats/cve-2026-108773-a-vulnerability-was-detected-in-erzhongxmu-jeewms-up-to-2026-09"}],"generated_at":"2026-11-11T03:07:00.183524+00:00"}