Vulnerabilidades en zj1983
14 resultadosAnálisis Vexday
O fornecedor zj1983 apresenta 14 vulnerabilidades catalogadas, mas nenhuma sob exploração ativa conhecida (KEV), o que reduz significativamente o risco imediato. A ausência de críticas CVSS e de divulgações recentes (últimos 90 dias) indica estabilização do panorama de risco. A fraqueza dominante é CWE-74 (Improper Neutralization of Special Elements in Output), exigindo revisão dos mecanismos de sanitização de dados.
CVE-2025-1818MEDIUMzj1983 zz ZfileAction.upload unrestricted uploadEPSS 0.7%CVE-2025-1846MEDIUMzj1983 zz File ZfileAction.java deleteLocalFile denial of serviceEPSS 0.6%CVE-2025-1812MEDIUMzj1983 zz SuperZ.java GetUserOrg sql injectionEPSS 0.6%CVE-2025-1821MEDIUMzj1983 zz ZorgAction.java getUserOrgForUserId sql injectionEPSS 0.6%CVE-2025-1831MEDIUMzj1983 zz ZorgAction.java GetDBUser sql injectionEPSS 0.6%CVE-2025-1834MEDIUMzj1983 zz resolve unrestricted uploadEPSS 0.5%CVE-2025-1832MEDIUMzj1983 zz ZroleAction.java getUserList sql injectionEPSS 0.5%CVE-2025-1820MEDIUMzj1983 zz ZworkflowAction.java getOaWid sql injectionEPSS 0.5%CVE-2025-1847MEDIUMzj1983 zz improper authorizationEPSS 0.5%CVE-2025-1833MEDIUMzj1983 zz HTTP Request Customer_noticeAction.java sendNotice server-side request forgeryEPSS 0.5%CVE-2025-1848MEDIUMzj1983 zz import_data_check server-side request forgeryEPSS 0.5%CVE-2025-1849MEDIUMzj1983 zz import_data_todb server-side request forgeryEPSS 0.5%CVE-2025-1830MEDIUMzj1983 zz Customer Information cross site scriptingEPSS 0.4%CVE-2025-1813MEDIUMzj1983 zz cross-site request forgeryEPSS 0.3%