Advisories · Technology
SeriaWei ZKEACMS.
Every CVE that names SeriaWei ZKEACMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
ZKEACMS through 4.4 Authentication Bypass via Hard-Coded JWT Signing Key
- SeriaWei ZKEACMS
- Hard-coded credentials
- CVSS 5.3 Medium
SeriaWei ZKEACMS POST Request UrlRedirectionController.cs Delete improper authorization
- SeriaWei ZKEACMS
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
SeriaWei ZKEACMS EventViewerController.cs Download path traversal
- SeriaWei ZKEACMS
- Path traversal
- CVSS 5.1 Medium
SeriaWei ZKEACMS SEOSuggestions ZKEACMS.SEOSuggestions.dll server-side request forgery
- SeriaWei ZKEACMS
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
SeriaWei ZKEACMS Event Action System PendingTaskController.cs Edit server-side request forgery
- SeriaWei ZKEACMS
- Server-side request forgery (SSRF)