Known Vulnerabilities for products from MingSoft
Listed below are 13 of the newest known vulnerabilities associated with the vendor "MingSoft".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-4954 | Not Provided | 2026-03-27 | 2026-03-27 | |
| CVE-2026-4953 | Not Provided | 2026-03-27 | 2026-03-30 | |
| CVE-2022-25125 | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 9.8 - CRITICAL | 2022-03-03 | 2022-03-09 |
| CVE-2022-23899 | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 9.8 - CRITICAL | 2022-03-03 | 2022-03-09 |
| CVE-2022-23898 | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 9.8 - CRITICAL | 2022-03-03 | 2022-03-09 |
| CVE-2022-23315 | MCMS v5.2.4 was discovered to contain an arbitrary file upload vulnerability via the component /ms/template/writeFileContent.... | 9.8 - CRITICAL | 2022-01-21 | 2022-01-26 |
| CVE-2022-23314 | MCMS v5.2.4 was discovered to contain a SQL injection vulnerability via /ms/mdiy/model/importJson.do. | 9.8 - CRITICAL | 2022-01-21 | 2022-01-26 |
| CVE-2022-22930 | A remote code execution (RCE) vulnerability in the Template Management function of MCMS v5.2.4 allows attackers to execute ar... | 9.8 - CRITICAL | 2022-01-21 | 2022-01-26 |
| CVE-2022-22929 | MCMS v5.2.4 was discovered to have an arbitrary file upload vulnerability in the New Template module, which allows attackers ... | 9.8 - CRITICAL | 2022-01-21 | 2022-01-26 |
| CVE-2022-22928 | MCMS v5.2.4 was discovered to have a hardcoded shiro-key, allowing attackers to exploit the key and execute arbitrary code. | 9.8 - CRITICAL | 2022-01-21 | 2022-01-26 |
| CVE-2020-23262 | An issue was discovered in ming-soft MCMS v5.0, where a malicious user can exploit SQL injection without logging in through /... | 9.8 - CRITICAL | 2021-01-26 | 2021-01-30 |
| CVE-2020-22755 | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 8.8 - HIGH | 2023-05-08 | 2023-05-12 |
| CVE-2020-20913 | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 9.8 - CRITICAL | 2023-04-04 | 2023-04-07 |
| CVE-2018-18831 | An issue was discovered in com\mingsoft\cms\action\GeneraterAction.java in MCMS 4.6.5. An attacker can write a .jsp file (in ... | 7.5 - HIGH | 2018-10-30 | 2018-12-11 |
| CVE-2018-18830 | An issue was discovered in com\mingsoft\basic\action\web\FileAction.java in MCMS 4.6.5. Since the upload interface does not v... | 9.8 - CRITICAL | 2018-10-30 | 2018-12-11 |