Ketr

ketr

3 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-51165 1Ketr 1Jepaas Jun 17, 2026 Dec 10, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 SQL injection vulnerability in JEPAAS7.2.8, via /je/rbac/rbac/loadLoginCount in the dateVal parameter, which could allow a remote user to submit a specially crafted query, allowing an attacker to retrieve all the informa...Show more SQL injection vulnerability in JEPAAS7.2.8, via /je/rbac/rbac/loadLoginCount in the dateVal parameter, which could allow a remote user to submit a specially crafted query, allowing an attacker to retrieve all the information stored in the DB.Show less
CVE-2024-51164 1Ketr 1Jepaas Jun 17, 2026 Nov 15, 2024 N/A· v4 9.1 CRITICAL· v3 N/A· v2 Multiple parameters have SQL injection vulnerability in JEPaaS 7.2.8 via /je/login/btnLog/insertBtnLog, which could allow a remote user to submit a specially crafted query, allowing an attacker to retrieve all the inform...Show more Multiple parameters have SQL injection vulnerability in JEPaaS 7.2.8 via /je/login/btnLog/insertBtnLog, which could allow a remote user to submit a specially crafted query, allowing an attacker to retrieve all the information stored in the DB.Show less
CVE-2024-46535 1Ketr 1Jepaas Jun 17, 2026 Oct 14, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Jepaas v7.2.8 was discovered to contain a SQL injection vulnerability via the orderSQL parameter at /homePortal/loadUserMsg.