Skip to content
OpenAdvisories

Vendor

AutohomeCorp

3 known vulnerabilities.

Products

frostmourne 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-5563

    AutohomeCorp frostmourne Alarm Preview previewData httpTest sql injection

    A security flaw has been discovered in AutohomeCorp frostmourne up to 1.0. Affected is the function httpTest of the file /api/monitor-api/alarm/previewData of the component Alarm Preview. The manipulation results in sql injection. The attack can be launched r…

    AutohomeCorp frostmourne
  • Medium 6.3
    CVE-2026-5259

    AutohomeCorp frostmourne Alarm Preview AlarmController.java server-side request forgery

    A vulnerability was determined in AutohomeCorp frostmourne up to 1.0. The affected element is an unknown function of the file frostmourne-monitor/src/main/java/com/autohome/frostmourne/monitor/controller/AlarmController.java of the component Alarm Preview. Ex…

    AutohomeCorp frostmourne
  • Medium 6.3
    CVE-2026-3968

    AutohomeCorp frostmourne Oracle Nashorn JavaScript ExpressionRule.java scriptEngine.eval code injection

    A vulnerability has been found in AutohomeCorp frostmourne up to 1.0. This affects the function scriptEngine.eval of the file ExpressionRule.java of the component Oracle Nashorn JavaScript Engine. Such manipulation of the argument EXPRESSION leads to code inj…

    AutohomeCorp frostmourne