Advisories · Technology

Metasoft 美特软件 MetaCRM.

Every CVE that names Metasoft 美特软件 MetaCRM among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-16324 CVE record

CVSS 6.9 Medium

Metasoft 美特软件 MetaCRM upload.jsp unrestricted upload
- Metasoft 美特软件 MetaCRM
- Broken access control
- Unrestricted file upload
Not analysed yet 20 Jul 2026
CVE-2026-15514 CVE record

CVSS 6.9 Medium

Metasoft 美特软件 MetaCRM PHPRPC Remote Call rpc.jsp RPCService.query sql injection
- Metasoft 美特软件 MetaCRM
- Other injection
- SQL injection
Not analysed yet 12 Jul 2026
CVE-2026-10205 CVE record

CVSS 5.3 Medium

Metasoft 美特软件 MetaCRM upload.jsp unrestricted upload
- Metasoft 美特软件 MetaCRM
- Broken access control
- Unrestricted file upload
Not analysed yet 1 Jun 2026
CVE-2026-8758 CVE record

CVSS 6.9 Medium

Metasoft 美特软件 MetaCRM upload3.jsp unrestricted upload
- Metasoft 美特软件 MetaCRM
- Broken access control
- Unrestricted file upload
Not analysed yet 17 May 2026
CVE-2026-6629 CVE record

CVSS 6.9 Medium

Metasoft 美特软件 MetaCRM Interface sql.jsp Statement.executeUpdate sql injection
- Metasoft 美特软件 MetaCRM
- Other injection
- SQL injection
Not analysed yet 20 Apr 2026
CVE-2025-7880 CVE record

CVSS 5.3 Medium

Metasoft 美特软件 MetaCRM sendsms.jsp unrestricted upload
- Metasoft 美特软件 MetaCRM
- Broken access control
- Unrestricted file upload
Not analysed yet 20 Jul 2025
CVE-2025-7879 CVE record

CVSS 5.3 Medium

Metasoft 美特软件 MetaCRM mobileupload.jsp unrestricted upload
- Metasoft 美特软件 MetaCRM
- Broken access control
- Unrestricted file upload
Not analysed yet 20 Jul 2025
CVE-2025-7878 CVE record

CVSS 5.3 Medium

Metasoft 美特软件 MetaCRM upload2.jsp unrestricted upload
- Metasoft 美特软件 MetaCRM
- Broken access control
- Unrestricted file upload
Not analysed yet 20 Jul 2025
CVE-2025-7877 CVE record

CVSS 5.3 Medium

Metasoft 美特软件 MetaCRM sendfile.jsp unrestricted upload
- Metasoft 美特软件 MetaCRM
- Broken access control
- Unrestricted file upload
Not analysed yet 20 Jul 2025
CVE-2025-7876 CVE record

CVSS 5.3 Medium

Metasoft 美特软件 MetaCRM download.jsp AnalyzeParam deserialization
- Metasoft 美特软件 MetaCRM
- Insecure deserialization
- CWE-20
Not analysed yet 20 Jul 2025
CVE-2025-7875 CVE record

CVSS 6.9 Medium

Metasoft 美特软件 MetaCRM debug.jsp improper authentication
- Metasoft 美特软件 MetaCRM
- Authentication bypass
Not analysed yet 20 Jul 2025
CVE-2025-7874 CVE record

CVSS 6.9 Medium

Metasoft 美特软件 MetaCRM env.jsp information disclosure
- Metasoft 美特软件 MetaCRM
- Information disclosure
- Broken access control
Not analysed yet 20 Jul 2025
CVE-2025-7873 CVE record

CVSS 5.3 Medium

Metasoft 美特软件 MetaCRM mcc_login.jsp sql injection
- Metasoft 美特软件 MetaCRM
- Other injection
- SQL injection
Not analysed yet 20 Jul 2025