J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysMsgPushMapper.xml.

Published May 23, 2024 · Updated Feb 13, 2025 · Assigned by mitre