CVE-2023-7116 Scanner
CVE-2023-7116 Scanner - OS Command Injection vulnerability in WeiYe-Jing datax-web
Used 2.2k times · 5.9k assets checked · domain, subdomain, ipv4
CVE
CVE-2023-7116
9.8
CVSSmedium
Exploitable remotely over the internet · low-privilege account sufficient.
Description
A vulnerability, which was classified as critical, has been found in WeiYe-Jing datax-web 2.1.2. Affected by this issue is some unknown functionality of the file /api/log/killJob of the component HTTP POST Request Handler. The manipulation of the argument processId leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-249086 is the identifier assigned to this vulnerability.
Attack Vector
Network
Privileges Req.
Low
User Interaction
None
datax-web
Updated Sep 18, 2026View on NVD →
S4E scanner
CVE history: datax-web
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →