Powerjob
Products
1- 14 CVEs
Recent CVEs
14| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-37754 | Cri | 0.66 | 9.8 | 0.30 | Jul 28, 2023 | PowerJob v4.3.3 was discovered to contain a remote command execution (RCE) vulnerability via the instanceId parameter at /instance/detail. | ||
| CVE-2024-44546 | Cri | 0.64 | 9.8 | 0.00 | Nov 11, 2024 | Powerjob >= 3.20 is vulnerable to SQL injection via the version parameter. | ||
| CVE-2023-29924 | Cri | 0.64 | 9.8 | 0.01 | Apr 21, 2023 | PowerJob V4.3.1 is vulnerable to Incorrect Access Control that allows for remote code execution. | ||
| CVE-2023-29926 | Cri | 0.64 | 9.8 | 0.01 | Apr 20, 2023 | PowerJob V4.3.2 has unauthorized interface that causes remote code execution. | ||
| CVE-2023-36106 | Hig | 0.49 | 7.5 | 0.01 | Aug 17, 2023 | An incorrect access control vulnerability in powerjob 4.3.2 and earlier allows remote attackers to obtain sensitive information via the interface for querying via appId parameter to /container/list. | ||
| CVE-2026-5739 | Hig | 0.47 | 7.3 | 0.00 | Apr 7, 2026 | A security flaw has been discovered in PowerJob 5.1.0/5.1.1/5.1.2. The affected element is the function GroovyEvaluator.evaluate of the file /openApi/addWorkflowNode of the component OpenAPI Endpoint. The manipulation of the argument nodeParams results in code injection. The… | ||
| CVE-2020-28865 | Hig | 0.42 | 7.5 | 0.01 | Jun 16, 2022 | An issue was discovered in PowerJob through 3.2.2, allows attackers to change arbitrary user passwords via the id parameter to /appinfo/save. | ||
| CVE-2025-14518 | Med | 0.41 | 6.3 | 0.00 | Dec 11, 2025 | A vulnerability was identified in PowerJob up to 5.1.2. This vulnerability affects the function checkConnectivity of the file src/main/java/tech/powerjob/common/utils/net/PingPongUtils.java of the component Network Request Handler. The manipulation of the argument… | ||
| CVE-2026-5736 | Hig | 0.40 | 7.3 | 0.00 | Apr 7, 2026 | A vulnerability was identified in PowerJob 5.1.0/5.1.1/5.1.2. Impacted is an unknown function of the file powerjob-server/powerjob-server-starter/src/main/java/tech/powerjob/server/web/controller/InstanceController.java of the component detailPlus Endpoint. The manipulation of… | ||
| CVE-2025-11580 | Med | 0.35 | 5.3 | 0.01 | Oct 10, 2025 | A weakness has been identified in PowerJob up to 5.1.2. This affects the function list of the file /user/list. This manipulation causes missing authorization. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. | ||
| CVE-2023-29922 | Med | 0.35 | 5.3 | 0.03 | Apr 19, 2023 | PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create user/save interface. | ||
| CVE-2023-29923 | Med | 0.35 | 5.3 | 0.10 | Apr 19, 2023 | PowerJob V4.3.1 is vulnerable to Insecure Permissions. via the list job interface. | ||
| CVE-2025-11581 | Med | 0.34 | 5.3 | 0.00 | Oct 10, 2025 | A security vulnerability has been detected in PowerJob up to 5.1.2. This vulnerability affects unknown code of the file /openApi/runJob of the component OpenAPIController. Such manipulation leads to missing authorization. The attack can be launched remotely. The exploit has been… | ||
| CVE-2023-29921 | Med | 0.34 | 5.3 | 0.01 | Apr 19, 2023 | PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create app interface. |
- risk 0.66cvss 9.8epss 0.30
PowerJob v4.3.3 was discovered to contain a remote command execution (RCE) vulnerability via the instanceId parameter at /instance/detail.
- risk 0.64cvss 9.8epss 0.00
Powerjob >= 3.20 is vulnerable to SQL injection via the version parameter.
- risk 0.64cvss 9.8epss 0.01
PowerJob V4.3.1 is vulnerable to Incorrect Access Control that allows for remote code execution.
- risk 0.64cvss 9.8epss 0.01
PowerJob V4.3.2 has unauthorized interface that causes remote code execution.
- risk 0.49cvss 7.5epss 0.01
An incorrect access control vulnerability in powerjob 4.3.2 and earlier allows remote attackers to obtain sensitive information via the interface for querying via appId parameter to /container/list.
- risk 0.47cvss 7.3epss 0.00
A security flaw has been discovered in PowerJob 5.1.0/5.1.1/5.1.2. The affected element is the function GroovyEvaluator.evaluate of the file /openApi/addWorkflowNode of the component OpenAPI Endpoint. The manipulation of the argument nodeParams results in code injection. The…
- risk 0.42cvss 7.5epss 0.01
An issue was discovered in PowerJob through 3.2.2, allows attackers to change arbitrary user passwords via the id parameter to /appinfo/save.
- risk 0.41cvss 6.3epss 0.00
A vulnerability was identified in PowerJob up to 5.1.2. This vulnerability affects the function checkConnectivity of the file src/main/java/tech/powerjob/common/utils/net/PingPongUtils.java of the component Network Request Handler. The manipulation of the argument…
- risk 0.40cvss 7.3epss 0.00
A vulnerability was identified in PowerJob 5.1.0/5.1.1/5.1.2. Impacted is an unknown function of the file powerjob-server/powerjob-server-starter/src/main/java/tech/powerjob/server/web/controller/InstanceController.java of the component detailPlus Endpoint. The manipulation of…
- risk 0.35cvss 5.3epss 0.01
A weakness has been identified in PowerJob up to 5.1.2. This affects the function list of the file /user/list. This manipulation causes missing authorization. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
- risk 0.35cvss 5.3epss 0.03
PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create user/save interface.
- risk 0.35cvss 5.3epss 0.10
PowerJob V4.3.1 is vulnerable to Insecure Permissions. via the list job interface.
- risk 0.34cvss 5.3epss 0.00
A security vulnerability has been detected in PowerJob up to 5.1.2. This vulnerability affects unknown code of the file /openApi/runJob of the component OpenAPIController. Such manipulation leads to missing authorization. The attack can be launched remotely. The exploit has been…
- risk 0.34cvss 5.3epss 0.01
PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create app interface.