Login Request a demo
J2
Product
J2eeFAST
by Dromara · last CVE May 7, 2024
3
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 1High 0Medium 2Low 0
Severity
All severities3Critical1High0Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add J2eeFAST to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-33153
9.8
1%
May 7
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the commentList() function
Affected: before 2.7.0
CVE-2023-2476
5.4
1%
May 2
Dromara J2eeFAST Announcement cross site scripting
Affected: 2.0; 2.1; 2.2; 2.3; 2.4; 2.5; +1 more
CVE-2023-2475
5.4
1%
May 2
Dromara J2eeFAST System Message cross site scripting
Affected: 2.0; 2.1; 2.2; 2.3; 2.4; 2.5; +1 more
Showing 3