Skip to contentJeecgboot vulnerabilities
Newest
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via /airag/ocr/edit EndpointCVE-2026-1086055.3 Medium
- jeecgboot jeewx-bootjeecgboot jeewx-boot doUpload Endpoint MyJwWebJwid3Controller.java MyJwWebJwid3Controller.doUpload unrestricted uploadCVE-2026-826295.1 Medium
- jeecgboot jimureportJimuReport Unauthenticated Report Listing and Share Token DisclosureCVE-2026-754798.7 High
- jeecgbootJeecgBoot 3.9.2 - Missing Authorization on OpenAPI Credential Management Endpoints Exposes Access/Secret KeysCVE-2026-583778.6 High
- jeecgboot jimureportJimuReport 2.5.0 - Unauthenticated Report Export via /jmreport/auto/exportCVE-2026-583758.7 High
- jeecgboot the server processes these urlsjeecgboot The server processes these URLs Cloud Instance Metadata Endpoint debug FileDownloadUtils.download2DiskFromNet server-side request forgeryCVE-2026-102415.3 Medium
- jeecgboot jimureportjeecgboot JimuReport Data Source testConnection DriverManager.getConnection code injectionCVE-2026-58485.1 Medium
- jeecgboot jeewx-bootjeecgboot jeewx-boot WxActGoldeneggsPrizesController.java getImgUrl path traversalCVE-2025-126265.3 Medium
- jeecg jimureportjeecgboot JimuReport DB2 JDBC testConnection deserializationCVE-2025-107715.3 Medium
- jeecg jimureportjeecgboot JimuReport MySQL JDBC testConnection deserializationCVE-2025-107705.3 Medium
- jeecg jimureportjeecgboot JimuReport Data Large Screen Template testConnection deserializationCVE-2025-89635.3 Medium
- jeecg jimureportjeecgboot JimuReport image path traversalCVE-2023-63076.3 Medium
- jeecg jimureportjeecgboot JimuReport Template injectionCVE-2023-4450Public exploitEPSS 11.6%6.3 Medium