Jflow

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-3813 Mar 09, 10:16 LOW POC Monitor

Injection vulnerability in JFlow's WF_CCForm Calculate function allows authenticated remote attackers to perform injection attacks with limited impact on confidentiality, integrity, and availability. Public exploit code exists for this vulnerability, though no patch is currently available from the project maintainers.

Java Information Disclosure Jflow

NVD VulDB

CVSS 4.0

2.1

EPSS

0.0%

CVE-2024-9003 Sep 19, 21:15 MEDIUM This Month

A vulnerability was found in Jinan Chicheng Company JFlow 2.0.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Jflow

NVD GitHub VulDB

CVSS 4.0

5.3

EPSS

0.3%

CVE-2026-3813

EPSS 0% CVSS 2.1

LOW POC Monitor

Java Information Disclosure Jflow

NVD VulDB

CVE-2024-9003

EPSS 0% CVSS 5.3

MEDIUM This Month

A vulnerability was found in Jinan Chicheng Company JFlow 2.0.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Jflow

NVD GitHub VulDB