Skip to content
OpenAdvisories

Vendor

jeequan

3 known vulnerabilities.

Products

jeepay 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.2
    CVE-2026-111608

    Jeepay through 3.2.9 IDOR via DELETE /api/divisionReceivers/{recordId}

    Jeepay through 3.2.9 contains an insecure direct object reference vulnerability that allows authenticated merchant users to delete other merchants' division receivers by exploiting an ownership check on the wrong column. Attackers holding ENT_DIVISION_RECEIVE…

    jeequan jeepay
  • Medium 6.3
    CVE-2026-18631

    jeequan jeepay PreAuthorize SysLogController.java WebSecurityConfig authorization

    A vulnerability was identified in jeequan jeepay up to 3.2.9. This vulnerability affects the function WebSecurityConfig of the file jeepay-manager/src/main/java/com/jeequan/jeepay/mgr/ctrl/sysuser/SysLogController.java of the component PreAuthorize Handler. T…

    jeequan jeepay