Vulnerabilities in crmeb

5 results

CVE-2026-85212HIGHCRMEB through 6.0.0 Missing Authorization via Inert verifyAuth Role CheckEPSS 0.6%CVE-2026-85177MEDIUMCRMEB through 6.0.0 Unauthorized Message Modification via edit_messageEPSS 0.4%CVE-2026-111354LOWcrmeb_java through 3.1 Authorization Bypass via Front Order Express and Refund EndpointsEPSS 0.3%CVE-2026-10771MEDIUMcrmeb crmeb_java base64 Qrcode Endpoint RestTemplateUtil.java RestTemplate.getForEntity server-side request forgeryEPSS 0.3%CVE-2026-111359HIGHCRMEB 5.6.1 through 6.0.0 IDOR via giftDetail and receiveGiftEPSS 0.3%