sfturing vulnerabilities
15 published CVEs name sfturing among the affected products.
- Published CVEs
- 15
- Last 12 months
- 12
- Critical
- 0
- Known exploited
- 0
Critical 0High 0Medium 14Low 1Not scored 0
CVEs per yearBy the year they were published
- 20253
- 202612
Newest CVEs
- CVE-2026-96552
sfturing hosp_order User Password MD5.java MD5.getMD5 hash without salt
sfturing · hosp_order
Low2.3 - CVE-2026-96551
sfturing hosp_order CommonUserController.java cross-site request forgery
sfturing · hosp_order
Medium5.3 - CVE-2026-96550
sfturing hosp_order MailUtil.java getProperties cleartext transmission
sfturing · hosp_order
Medium6.3 - CVE-2026-96549
sfturing hosp_order CommonUserServiceImpl.java cleartext storage
sfturing · hosp_order
Medium4.8 - CVE-2026-96548
sfturing hosp_order jdbc.properties hard-coded credentials
sfturing · hosp_order
Medium6.3 - CVE-2026-95396
sfturing hosp_order Public Search Handlers HospitalController.java cross site scripting
sfturing · hosp_order
Medium5.3 - CVE-2026-86264
sfturing ssm_pro Order Endpoint OrderController.java cross site scripting
sfturing · ssm_pro
Medium5.3 - CVE-2026-86263
sfturing hosp_order Order Cancellation OrderController.java orderRecordsService.cancelOrder authorization
sfturing · hosp_order
Medium6.9 - CVE-2026-86262
sfturing hosp_order Order OrderController.java updateOrderdiseaseInfo authorization
sfturing · hosp_order
Medium6.9 - CVE-2026-86261
sfturing hosp_order Order Controller OrderController.java authorization
sfturing · hosp_order
Medium6.9
Products with the most CVEs
Most common weaknesses
- CWE-74 Injection4
- CWE-89 SQL injection4
- CWE-285 Improper authorization3
- CWE-639 Authorization bypass through a user-controlled key (IDOR)3
- CWE-310 2
- CWE-79 Cross-site scripting (XSS)2
- CWE-94 Code injection2
- CWE-259 1
- CWE-312 Cleartext storage of sensitive information1
- CWE-319 Cleartext transmission of sensitive information1