Jeecg vulnerabilities

Products

• Boot 57
• Jimureport 7
• Jeecg 6
• Jeecgboot 3

Newest

• jeecg boot A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3... CVE-2024-43028 9.8 CriticalApril 1, 2026
• jeecg boot There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character... CVE-2024-40489 9.8 CriticalApril 1, 2026
• jeecg boot JeecgBoot uploadImgByHttp server-side request forgery CVE-2026-2945 5.3 MediumFebruary 22, 2026
• jeecg boot JeecgBoot Backend airag_app,1,create_by sql injection CVE-2026-2822 5.3 MediumFebruary 20, 2026
• jeecg boot JeecgBoot Retrieval-Augmented Generation AiragKnowledgeController.java importDocumentFromZip deserialization CVE-2026-2555 2.3 LowFebruary 16, 2026
• jeecg boot JeecgBoot Retrieval-Augmented Generation edit path traversal CVE-2026-2111 5.3 MediumFebruary 7, 2026
• jeecg boot JeecgBoot Online Report API loadDictItemByKeyword sql injection CVE-2026-1746 5.3 MediumFebruary 2, 2026
• jeecg jimureport JimuReport thru version 2.1.3 is vulnerable to remote code execution when processing user... CVE-2025-66913 9.8 CriticalJanuary 8, 2026
• jeecg boot JeecgBoot getPositionUserList improper authorization CVE-2025-15126 2.3 LowDecember 28, 2025
• jeecg boot JeecgBoot queryDepartPermission improper authorization CVE-2025-15125 2.3 LowDecember 28, 2025
• jeecg boot JeecgBoot list getParameterMap improper authorization CVE-2025-15124 2.3 LowDecember 28, 2025
• jeecg boot JeecgBoot datarule improper authorization CVE-2025-15123 2.3 LowDecember 28, 2025
• jeecg boot JeecgBoot datarule loadDatarule improper authorization CVE-2025-15122 2.3 LowDecember 28, 2025
• jeecg boot JeecgBoot getDeptRoleByUserId information disclosure CVE-2025-15121 4.8 MediumDecember 28, 2025
• jeecg boot JeecgBoot getDeptRoleList improper authorization CVE-2025-15120 2.3 LowDecember 28, 2025
• jeecg boot JeecgBoot list queryPageList improper authorization CVE-2025-15119 2.3 LowDecember 28, 2025
• jeecg boot JeecgBoot SysUserOnlineController.java SysUserOnlineController user session CVE-2025-14909 5.3 MediumDecember 19, 2025
• jeecg boot JeecgBoot Multi-Tenant Management SysTenantController.java improper authentication CVE-2025-14908 5.3 MediumDecember 19, 2025
• jeecg boot Jeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability. The endpoint... CVE-2025-61189 6.3 MediumOctober 1, 2025
• jeecg boot Jeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability. This... CVE-2025-61188 6.3 MediumOctober 1, 2025
• jeecg boot JeecgBoot exportXls improper authorization CVE-2025-10981 5.3 MediumSeptember 26, 2025
• jeecg boot JeecgBoot exportXls improper authorization CVE-2025-10980 5.3 MediumSeptember 25, 2025
• jeecg boot JeecgBoot exportXls improper authorization CVE-2025-10979 5.3 MediumSeptember 25, 2025
• jeecg boot JeecgBoot Filter exportXls improper authorization CVE-2025-10978 5.3 MediumSeptember 25, 2025
• jeecg boot JeecgBoot deleteBatch improper authorization CVE-2025-10977 2.3 LowSeptember 25, 2025
• jeecg boot JeecgBoot getDepartUserList improper authorization CVE-2025-10976 2.3 LowSeptember 25, 2025
• jeecg jimureport jeecgboot JimuReport DB2 JDBC testConnection deserialization CVE-2025-10771 5.3 MediumSeptember 21, 2025
• jeecg jimureport jeecgboot JimuReport MySQL JDBC testConnection deserialization CVE-2025-10770 5.3 MediumSeptember 21, 2025
• jeecg boot JeecgBoot sendMsg improper authorization CVE-2025-10707 5.3 MediumSeptember 19, 2025
• jeecg boot JeecgBoot Tenant Log Export exportLog improper authorization CVE-2025-10319 5.3 MediumSeptember 12, 2025
• jeecg boot JeecgBoot WebSocket Message sendWebSocketMsg improper authorization CVE-2025-10318 5.3 MediumSeptember 12, 2025
• jeecg jimureport jeecgboot JimuReport Data Large Screen Template testConnection deserialization CVE-2025-8963 5.3 MediumAugust 14, 2025
• jeecg boot JeecgBoot Document Library Upload zip unzipFile resource consumption CVE-2025-4533 5.1 MediumMay 11, 2025
• jeecg boot, jeecgboot +1 more JeecgBoot SQL Injection vulnerability CVE-2024-48307 Public exploit EPSS 50.3% 9.8 CriticalOctober 31, 2024
• jeecg jimureport An issue in the component /jeecg-boot/jmreport/dict/list of JimuReport v1.7.8 allows attacker to... CVE-2024-44893 9.8 CriticalSeptember 10, 2024
• jeecg Deserialization of Untrusted Data in jeecgFormDemoController in JEECG 4.0 and earlier allows... CVE-2023-49442 EPSS 38.5% 9.8 CriticalJanuary 3, 2024
• jeecg boot JeecgBoot server-side template injection CVE-2023-41544 9.8 CriticalDecember 30, 2023
• jeecg boot Jeecg Boot SQL Injection CVE-2023-41543 9.8 CriticalDecember 30, 2023
• jeecg boot Jeecg Boot SQL injection vulnerability CVE-2023-41542 9.8 CriticalDecember 30, 2023
• jeecg jimureport jeecgboot JimuReport image path traversal CVE-2023-6307 6.3 MediumNovember 27, 2023
• jeecg boot Directory Traversal in jeecg-boot CVE-2023-47467 6.5 MediumNovember 22, 2023
• jeecg boot SQL injection in jeecgboot CVE-2023-40989 Public exploitFix available 9.8 CriticalSeptember 22, 2023
• jeecg boot Jeecg boot SQL Injection vulnerability CVE-2023-42268 9.8 CriticalSeptember 8, 2023
• jeecg boot Jeecg boot arbitrary file read vulnerability CVE-2023-41578 7.5 HighSeptember 8, 2023
• jeecg jimureport jeecgboot JimuReport Template injection CVE-2023-4450 Public exploit EPSS 11.6% 6.3 MediumAugust 21, 2023
• jeecg boot Jeecg-boot SQL Injection vulnerability CVE-2023-38905 5.5 MediumAugust 17, 2023
• jeecg boot SQL injection in jeecg-boot CVE-2023-38992 Fix available EPSS 73.4% 9.8 CriticalJuly 28, 2023
• jeecg jeecgboot JeecgBoot vulnerable to SQL injection in queryFilterTableDictInfo CVE-2023-34603 Fix available 7.5 HighJune 19, 2023
• jeecg jeecgboot JeecgBoot vulnerable to SQL injection in queryTableDictItemsByCode CVE-2023-34602 Fix available 7.5 HighJune 19, 2023
• jeecg boot jeecg-boot unrestricted file upload vulnerability CVE-2023-34660 6.5 MediumJune 16, 2023
• Show olderLoading…