JE
Product
JeecgBoot
36
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 10Medium 19Low 7
Watch
Add JeecgBoot to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-2822 | 8.8 | Feb 20 | JeecgBoot Backend airag_app,1,create_by sql injection Affected: 3.9.0; 3.9.1 |
| CVE-2026-1746 | 8.8 | Feb 2 | JeecgBoot Online Report API loadDictItemByKeyword sql injection Affected: 3.9.0 |
| CVE-2025-10707 | 8.8 | Sep 19 | JeecgBoot sendMsg improper authorization Affected: 3.8.0; 3.8.1; 3.8.2 |
| CVE-2025-10318 | 8.8 | Sep 12 | JeecgBoot WebSocket Message sendWebSocketMsg improper authorization Affected: 3.8.0; 3.8.1; 3.8.2 |
| CVE-2025-14909 | 8.1 | Dec 19 | JeecgBoot SysUserOnlineController.java SysUserOnlineController user session Affected: 3.0; 3.1; 3.2; 3.3; 3.4; 3.5; +4 more |
| CVE-2025-14908 | 8.1 | Dec 19 | JeecgBoot Multi-Tenant Management SysTenantController.java improper authentication Affected: 3.0; 3.1; 3.2; 3.3; 3.4; 3.5; +4 more |
| CVE-2026-2555 | 7.5 | Feb 16 | JeecgBoot Retrieval-Augmented Generation AiragKnowledgeController.java importDocumentFromZip deserialization Affected: 3.9.1 |
| CVE-2025-15126 | 7.5 | Dec 28 | JeecgBoot getPositionUserList improper authorization Affected: 3.0; 3.1; 3.2; 3.3; 3.4; 3.5; +4 more |
| CVE-2025-4533 | 7.5 | May 11 | JeecgBoot Document Library Upload zip unzipFile resource consumption Affected: 3.0; 3.1; 3.2; 3.3; 3.4; 3.5; +3 more |
| CVE-2026-5616 | 7.3 | Apr 6 | JeecgBoot AI Chat JeecgBizToolsProvider.java missing authentication Affected: 3.9.0; 3.9.1 |
| CVE-2026-2945 | 6.5 | Feb 22 | JeecgBoot uploadImgByHttp server-side request forgery Affected: 3.9.0 |
| CVE-2025-10981 | 6.5 | Sep 26 | JeecgBoot exportXls improper authorization Affected: 3.8.0; 3.8.1; 3.8.2 |
| CVE-2025-10980 | 6.5 | Sep 25 | JeecgBoot exportXls improper authorization Affected: 3.8.0; 3.8.1; 3.8.2 |
| CVE-2025-10979 | 6.5 | Sep 25 | JeecgBoot exportXls improper authorization Affected: 3.8.0; 3.8.1; 3.8.2 |
| CVE-2025-10978 | 6.5 | Sep 25 | JeecgBoot Filter exportXls improper authorization Affected: 3.8.0; 3.8.1; 3.8.2 |
| CVE-2025-10319 | 6.5 | Sep 12 | JeecgBoot Tenant Log Export exportLog improper authorization Affected: 3.8.0; 3.8.1; 3.8.2 |
| CVE-2026-8114 | 6.3 | May 7 | JeecgBoot JSON Object loadTreeData sql injection Affected: 3.9.0; 3.9.1 |
| CVE-2026-7605 | 6.3 | May 2 | JeecgBoot uploadImgByHttpEndpoint CommonController.java HttpFileToMultipartFileUtil.downloadImageData server-side request forgery Affected: 3.9.0; 3.9.1 |
| CVE-2026-7604 | 6.3 | May 2 | JeecgBoot OpenApi Service OpenApiController.java OpenApiController.call server-side request forgery Affected: 3.9.0; 3.9.1 |
| CVE-2026-7603 | 6.3 | May 2 | JeecgBoot LoadFile Endpoint FileDownloadUtils.jav checkPathTraversalBatch server-side request forgery Affected: 3.9.0; 3.9.1 |
| CVE-2026-7602 | 6.3 | May 2 | JeecgBoot FillRuleUtil edit improper authorization Affected: 3.9.0; 3.9.1 |
| CVE-2026-7290 | 6.3 | Apr 28 | JeecgBoot loadDict Endpoint SqlInjectionUtil.java SqlInjectionUtil sql injection Affected: 3.9.0; 3.9.1 |
| CVE-2026-5999 | 6.3 | Apr 10 | JeecgBoot SysAnnouncementController improper authorization Affected: 3.9.0; 3.9.1 |
| CVE-2026-3672 | 6.3 | Mar 7 | JeecgBoot getDictItems isExistSqlInjectKeyword sql injection Affected: 3.9.0; 3.9.1 |
| CVE-2025-10977 | 5.3 | Sep 25 | JeecgBoot deleteBatch improper authorization Affected: 3.8.0; 3.8.1; 3.8.2 |
| CVE-2025-10976 | 5.3 | Sep 25 | JeecgBoot getDepartUserList improper authorization Affected: 3.8.0; 3.8.1; 3.8.2 |
| CVE-2025-15121 | 4.9 | Dec 28 | JeecgBoot getDeptRoleByUserId information disclosure Affected: 3.0; 3.1; 3.2; 3.3; 3.4; 3.5; +4 more |
| CVE-2026-8195 | 4.3 | May 9 | JeecgBoot SVG File CommonController.java cross site scripting Affected: 3.9.0; 3.9.1 |
| CVE-2026-2111 | 4.3 | Feb 7 | JeecgBoot Retrieval-Augmented Generation edit path traversal Affected: 3.0; 3.1; 3.2; 3.3; 3.4; 3.5; +4 more |
| CVE-2026-8196 | 3.7 | May 9 | JeecgBoot mLogin Endpoint LoginController.java authorization Affected: 3.9.1 |
| CVE-2025-15125 | 3.1 | Dec 28 | JeecgBoot queryDepartPermission improper authorization Affected: 3.0; 3.1; 3.2; 3.3; 3.4; 3.5; +4 more |
| CVE-2025-15124 | 3.1 | Dec 28 | JeecgBoot list getParameterMap improper authorization Affected: 3.0; 3.1; 3.2; 3.3; 3.4; 3.5; +4 more |
| CVE-2025-15123 | 3.1 | Dec 28 | JeecgBoot datarule improper authorization Affected: 3.0; 3.1; 3.2; 3.3; 3.4; 3.5; +4 more |
| CVE-2025-15122 | 3.1 | Dec 28 | JeecgBoot datarule loadDatarule improper authorization Affected: 3.0; 3.1; 3.2; 3.3; 3.4; 3.5; +4 more |
| CVE-2025-15120 | 3.1 | Dec 28 | JeecgBoot getDeptRoleList improper authorization Affected: 3.0; 3.1; 3.2; 3.3; 3.4; 3.5; +4 more |
| CVE-2025-15119 | 3.1 | Dec 28 | JeecgBoot list queryPageList improper authorization Affected: 3.0; 3.1; 3.2; 3.3; 3.4; 3.5; +4 more |
Showing 36