EL
Product
eladmin
13
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 1High 3Medium 6Low 3
Watch
Add eladmin to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-7458 | 9.8 | Aug 4 | elunez eladmin Database Management/Deployment Management upload path traversal Affected: 2.0; 2.1; 2.2; 2.3; 2.4; 2.5; +2 more |
| CVE-2025-9241 | 7.5 | Aug 20 | elunez eladmin exportUser csv injection Affected: 2.0; 2.1; 2.2; 2.3; 2.4; 2.5; +2 more |
| CVE-2025-8530 | 7.5 | Aug 4 | elunez eladmin Druid application-prod.yml default credentials Affected: 2.0; 2.1; 2.2; 2.3; 2.4; 2.5; +2 more |
| CVE-2025-2855 | 7.2 | Mar 27 | elunez eladmin upload checkFile deserialization Affected: 2.0; 2.1; 2.2; 2.3; 2.4; 2.5; +2 more |
| CVE-2025-3250 | 6.5 | Apr 4 | elunez eladmin Maintenance Management Module testConnect deserialization Affected: 2.7 |
| CVE-2025-9937 | 5.4 | Sep 3 | elunez eladmin LocalStorageController deleteFile improper authorization Affected: 1.1 |
| CVE-2026-108706 | 4.3 | Oct 11 | eladmin through commit 55fbf70 Missing Authorization via S3 Storage Download Endpoint Affected: through 55fbf705956949697dbd68bf9003776609d3d029 |
| CVE-2026-108688 | 4.3 | Oct 11 | Eladmin through 2.7 Missing Authorization via /api/localStorage/pictures Upload Affected: through 2.7 |
| CVE-2025-10084 | 4.3 | Sep 8 | elunez eladmin SysLogController 1 queryErrorLogDetail improper authorization Affected: 2.0; 2.1; 2.2; 2.3; 2.4; 2.5; +2 more |
| CVE-2025-9240 | 4.3 | Aug 20 | elunez eladmin info information disclosure Affected: 2.0; 2.1; 2.2; 2.3; 2.4; 2.5; +2 more |
| CVE-2026-111604 | 3.8 | Oct 16 | eladmin through 2.7 Broken Access Control via /api/users Update and Delete Affected: through 2.7 |
| CVE-2025-9239 | 3.7 | Aug 20 | elunez eladmin DES Key EncryptUtils.java EncryptUtils inadequate encryption Affected: 2.0; 2.1; 2.2; 2.3; 2.4; 2.5; +2 more |
| CVE-2025-10014 | 3.1 | Sep 5 | elunez eladmin Email Address updateEmail updateUserEmail improper authorization Affected: 2.0; 2.1; 2.2; 2.3; 2.4; 2.5; +2 more |
Showing 13