Advisories · Technology
Tiandy Easy7 Integrated Management Platform.
Every CVE that names Tiandy Easy7 Integrated Management Platform among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
Tiandy Easy7 Integrated Management Platform API Endpoint updateUserPassword password recovery
- Tiandy Easy7 Integrated Management Platform
- CWE-640
- CVSS 6.9 Medium
Tiandy Easy7 Integrated Management Platform GetDBDataEx.jsp sql injection
- Tiandy Easy7 Integrated Management Platform
- Other injection
- SQL injection
- CVSS 6.9 Medium
Tiandy Easy7 Integrated Management Platform updateDbBackupInfo os command injection
- Tiandy Easy7 Integrated Management Platform
- Command injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Tiandy Easy7 Integrated Management Platform Configuration ImportSystemConfiguration.jsp os command injection
- Tiandy Easy7 Integrated Management Platform
- Command injection
- CVSS 6.9 Medium
Tiandy Easy7 Integrated Management Platform getRecByTemplateId sql injection
- Tiandy Easy7 Integrated Management Platform
- Other injection
- SQL injection
- CVSS 6.9 Medium
Tiandy Easy7 Integrated Management Platform Endpoint getDevDetailedInfo sql injection
- Tiandy Easy7 Integrated Management Platform
- Other injection
- SQL injection
- CVSS 6.9 Medium
Tiandy Easy7 Integrated Management Platform Endpoint queryResources sql injection
- Tiandy Easy7 Integrated Management Platform
- Other injection
- SQL injection
- CVSS 6.9 Medium
Tiandy Easy7 Integrated Management Platform Endpoint uploadLedImage unrestricted upload
- Tiandy Easy7 Integrated Management Platform
- Broken access control
- Unrestricted file upload
- CVSS 6.9 Medium
Tiandy Easy7 Integrated Management Platform Device Identifier UpdateLocalDevInfo.jsp missing authentication
- Tiandy Easy7 Integrated Management Platform
- Authentication bypass