Vulnerabilities in sfturing
15 resultsCVE-2026-86260MEDIUMsfturing hosp_order Password Recovery CommonUserController.java modifyPassWord unverified password changeEPSS 0.6%CVE-2026-86263MEDIUMsfturing hosp_order Order Cancellation OrderController.java orderRecordsService.cancelOrder authorizationEPSS 0.6%CVE-2026-86262MEDIUMsfturing hosp_order Order OrderController.java updateOrderdiseaseInfo authorizationEPSS 0.6%CVE-2026-86261MEDIUMsfturing hosp_order Order Controller OrderController.java authorizationEPSS 0.6%CVE-2026-95396MEDIUMsfturing hosp_order Public Search Handlers HospitalController.java cross site scriptingEPSS 0.5%CVE-2026-86264MEDIUMsfturing ssm_pro Order Endpoint OrderController.java cross site scriptingEPSS 0.4%CVE-2026-96548MEDIUMsfturing hosp_order jdbc.properties hard-coded credentialsEPSS 0.4%CVE-2025-6766MEDIUMsfturing hosp_order OfficeServiceImpl.java getOfficeName sql injectionEPSS 0.4%CVE-2025-6768MEDIUMsfturing hosp_order HospitalServiceImpl.java findAllHosByCondition sql injectionEPSS 0.3%CVE-2026-96550MEDIUMsfturing hosp_order MailUtil.java getProperties cleartext transmissionEPSS 0.3%CVE-2025-6767MEDIUMsfturing hosp_order DoctorServiceImpl.java findDoctorByCondition sql injectionEPSS 0.3%CVE-2025-15450MEDIUMsfturing hosp_order orderHos findOrderHosNum sql injectionEPSS 0.3%CVE-2026-96552LOWsfturing hosp_order User Password MD5.java MD5.getMD5 hash without saltEPSS 0.2%CVE-2026-96551MEDIUMsfturing hosp_order CommonUserController.java cross-site request forgeryEPSS 0.2%CVE-2026-96549MEDIUMsfturing hosp_order CommonUserServiceImpl.java cleartext storageEPSS 0.1%