CVE-2025-70997

<= 2.7

A vulnerability has been discovered in eladmin v2.7 and before. This vulnerability allows for an arbitrary user password reset und

6.5MEDIUM

CVE-2025-10084

<= 2.7

A vulnerability was identified in elunez eladmin up to 2.7. This affects the function queryErrorLogDetail of the file /api/logs/er

4.3MEDIUM

CVE-2025-10014

<= 2.7

A flaw has been found in elunez eladmin up to 2.7. This impacts the function updateUserEmail of the file /api/users/updateEmail/ o

3.1LOW

CVE-2025-9241

<= 2.7

A weakness has been identified in elunez eladmin up to 2.7. This affects the function exportUser. This manipulation causes csv inj

6.3MEDIUM

CVE-2025-9240

<= 2.7

A security flaw has been discovered in elunez eladmin up to 2.7. Affected by this issue is some unknown functionality of the file

4.3MEDIUM

CVE-2025-9239

<= 2.7

A vulnerability was identified in elunez eladmin up to 2.7. Affected by this vulnerability is the function EncryptUtils of the fil

3.7LOW

CVE-2025-8530

<= 2.7

A vulnerability, which was classified as problematic, has been found in elunez eladmin up to 2.7. Affected by this issue is some u

5.3MEDIUM

CVE-2025-3250

all versions

A vulnerability, which was classified as problematic, has been found in elunez eladmin 2.7. Affected by this issue is some unknown

4.3MEDIUM

CVE-2025-2855

<= 2.7

A vulnerability, which was classified as problematic, has been found in elunez eladmin up to 2.7. Affected by this issue is the fu

4.7MEDIUM

CVE-2025-22978

<= 2.7

eladmin <=2.7 is vulnerable to CSV Injection in the exception log download module.

9.8CRITICAL

CVE-2024-51243

<= 2.7

The eladmin v2.7 and before contains a remote code execution (RCE) vulnerability that can control all application deployment serve

7.2HIGH

CVE-2024-51242

<= 2.7

A Server-Side Request Forgery (SSRF) vulnerability has been identified in eladmin 2.7 and earlier in ServerDeployController.java.

6.5MEDIUM

CVE-2024-44677

<= 2.7

eladmin v2.7 and before is vulnerable to Server-Side Request Forgery (SSRF) which allows an attacker to execute arbitrary code via

9.8CRITICAL

CVE-2024-44676

<= 2.7

eladmin v2.7 and before is vulnerable to Cross Site Scripting (XSS) which allows an attacker to execute arbitrary code via LocalSt

4.8MEDIUM

CVE-2024-7458

<= 2.7

A vulnerability was found in elunez eladmin up to 2.7 and classified as critical. This issue affects some unknown processing of th

5.5MEDIUM