erzhongxmu has 10 CVEs on record. Disclosure cadence is accelerating: 10 in the last 90 days against 0 in the 90 before. The busiest recent month was October 2026 with 10. The median CVSS is 6.3 (medium). None have a confirmed exploitation report. The dominant weakness classes are CWE-74 (9) and CWE-89 (9).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.3
- Publish → KEV
- —
- Last 90 days
- 10 prev 0
Worst active — by depth score
CVE-2026-108782Medium· 6.3A weakness has been identified in erzhongxmu JEEWMS up to 2026.09.27-W3947CVE-2026-108781Medium· 6.3A security flaw has been discovered in erzhongxmu JEEWMS up to 2026.09.27-W3947CVE-2026-108777Medium· 6.3A vulnerability was found in erzhongxmu JEEWMS up to 2026.09.27-W3947CVE-2026-108775Medium· 6.3A vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W3947CVE-2026-108684Medium· 6.3A vulnerability was detected in erzhongxmu Jeewms up to 3.747
erzhongxmu vulnerabilities
CVEs affecting erzhongxmu, newest first. Open any entry for full detail, references, and exploit status.
10 CVEsRSS
CVE-2021-48015High· 7.5JeeWMS Path Traversal via showOrDownByurl.do
JeeWMS before commit 0a610e8 contains an unauthenticated path traversal vulnerability that allows remote attackers to read arbitrary files via the dbPath parameter. Attackers can send GET requests to /systemController/showOrDownByurl.do …
CVE-2026-108782Medium· 6.3PoCA weakness has been identified in erzhongxmu JEEWMS up to 2026.09.27-W39
A weakness has been identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this issue is the function CommonServiceImpl.getAutoList of the file src/main/java/org/jeecgframework/core/common/service/impl/CommonServiceImpl.java o…
CVE-2026-108781Medium· 6.3PoCA security flaw has been discovered in erzhongxmu JEEWMS up to 2026.09.27-W39
A security flaw has been discovered in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this vulnerability is the function WmToMoveGoodsController.list of the file src/main/java/com/zzjee/wm/controller/WmToMoveGoodsController.java of …
CVE-2026-108779Medium· 6.3A vulnerability was identified in erzhongxmu JEEWMS up to 2026.09.27-W39
A vulnerability was identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected is the function WmSttInGoodsController.list of the file src/main/java/com/zzjee/wm/controller/WmSttInGoodsController.java. Such manipulation of the argume…
CVE-2026-108778Medium· 6.3A vulnerability was determined in erzhongxmu JEEWMS up to 2026.09.27-W39
A vulnerability was determined in erzhongxmu JEEWMS up to 2026.09.27-W39. This impacts the function WmInQmIController.list of the file src/main/java/com/zzjee/wm/controller/WmInQmIController.java of the component Inbound Quality Check Pd…
CVE-2026-108777Medium· 6.3PoCA vulnerability was found in erzhongxmu JEEWMS up to 2026.09.27-W39
A vulnerability was found in erzhongxmu JEEWMS up to 2026.09.27-W39. This affects the function WvGiController.list of the file src/main/java/com/zzjee/wmapi/controller/WvGiController.java. The manipulation of the argument searchstr resul…
CVE-2026-108775Medium· 6.3PoCA vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W39
A vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The impacted element is the function WvNoticeController.list of the file com/zzjee/wmapi/controller/WvNoticeController.java of the component Search Endpoint. The m…
CVE-2026-108774Medium· 6.3A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39
A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The affected element is the function getbinall/getbinallagv of the file src/main/java/com/zzjee/md/controller/MdBinController.java. Executing a manipulation of the argument…
CVE-2026-108773Medium· 6.3A vulnerability was detected in erzhongxmu JEEWMS up to 2026.09.27-W39
A vulnerability was detected in erzhongxmu JEEWMS up to 2026.09.27-W39. Impacted is the function docheck of the file src/main/java/com/zzjee/wm/controller/WmOmNoticeHController.java. Performing a manipulation of the argument goodscode re…
CVE-2026-108684Medium· 6.3PoCA vulnerability was detected in erzhongxmu Jeewms up to 3.7
A vulnerability was detected in erzhongxmu Jeewms up to 3.7. This affects the function getTreeData of the file src/main/java/com/jeecg/demo/controller/JeecgFormDemoController.java of the component Autocomplete Data Handler. Performing a …