VendorsZframeworkszzall versions
Vulnerabilities

Zframeworks Zz

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

14CVEs
CVE-2025-1818
zj1983 zz ZfileAction.upload unrestricted upload
Published 2025-03-02 · Analyzed
9.8EPSS 0.007
CVE-2025-1821
zj1983 zz ZorgAction.java getUserOrgForUserId sql injection
Published 2025-03-02 · Analyzed
9.8EPSS 0.006
CVE-2025-1831
zj1983 zz ZorgAction.java GetDBUser sql injection
Published 2025-03-02 · Analyzed
9.8EPSS 0.006
CVE-2025-1834
zj1983 zz resolve unrestricted upload
Published 2025-03-02 · Analyzed
9.8EPSS 0.005
CVE-2025-1812
zj1983 zz SuperZ.java GetUserOrg sql injection
Published 2025-03-02 · Analyzed
8.8EPSS 0.006
CVE-2025-1820
zj1983 zz ZworkflowAction.java getOaWid sql injection
Published 2025-03-02 · Analyzed
8.8EPSS 0.005
CVE-2025-1832
zj1983 zz ZroleAction.java getUserList sql injection
Published 2025-03-02 · Analyzed
8.8EPSS 0.005
CVE-2025-1833
zj1983 zz HTTP Request Customer_noticeAction.java sendNotice server-side request forgery
Published 2025-03-02 · Analyzed
8.8EPSS 0.005
CVE-2025-1847
zj1983 zz improper authorization
Published 2025-03-03 · Analyzed
8.8EPSS 0.005
CVE-2025-1848
zj1983 zz import_data_check server-side request forgery
Published 2025-03-03 · Analyzed
8.8EPSS 0.005
CVE-2025-1849
zj1983 zz import_data_todb server-side request forgery
Published 2025-03-03 · Analyzed
8.8EPSS 0.005
CVE-2025-1846
zj1983 zz File ZfileAction.java deleteLocalFile denial of service
Published 2025-03-03 · Analyzed
6.5EPSS 0.006
CVE-2025-1813
zj1983 zz cross-site request forgery
Published 2025-03-02 · Analyzed
6.5EPSS 0.003
CVE-2025-1830
zj1983 zz Customer Information cross site scripting
Published 2025-03-02 · Analyzed
4.8EPSS 0.004