JB
Product
Jeecg Boot
57
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 21High 11Medium 19Low 6
Watch
Add Jeecg Boot to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-2945 | 6.5 | Feb 22 | JeecgBoot uploadImgByHttp server-side request forgery Affected: 3.9.0 |
| CVE-2025-10981 | 6.5 | Sep 26 | JeecgBoot exportXls improper authorization Affected: through 3.8.2 |
| CVE-2025-10980 | 6.5 | Sep 25 | JeecgBoot exportXls improper authorization Affected: through 3.8.2 |
| CVE-2025-10979 | 6.5 | Sep 25 | JeecgBoot exportXls improper authorization Affected: through 3.8.2 |
| CVE-2025-10978 | 6.5 | Sep 25 | JeecgBoot Filter exportXls improper authorization Affected: through 3.8.2 |
| CVE-2025-10319 | 6.5 | Sep 12 | JeecgBoot Tenant Log Export exportLog improper authorization Affected: through 3.8.2 |
| CVE-2023-47467 | 6.5 | Nov 22 | Directory Traversal vulnerability in jeecg-boot v.3.6.0 allows a remote privileged attacker to obtain sensitive information via the file directory structure Affected: 3.6.0 |
| CVE-2023-34660 | 6.5 | Jun 16 | jjeecg-boot V3.5.0 has an unauthorized arbitrary file upload in /jeecg-boot/jmreport/upload interface Affected: 3.5.0; 3.5.1 |
| CVE-2025-61188 | 6.3 | Oct 1 | Jeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability Affected: through 3.8.2 |
| CVE-2025-61189 | 6.3 | Oct 1 | Jeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability Affected: through 3.8.2 |
| CVE-2021-44585 | 6.1 | Mar 10 | A Cross Site Scripting (XSS) vulnerabilitiy exits in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event Affected: 3.0 |
| CVE-2023-38905 | 5.5 | Aug 17 | SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PG_Sleep, DBMS_Lock.Sleep, Waitfor, DECODE,… Affected: through 3.5.0 |
| CVE-2025-10977 | 5.3 | Sep 25 | JeecgBoot deleteBatch improper authorization Affected: through 3.8.2 |
| CVE-2025-10976 | 5.3 | Sep 25 | JeecgBoot getDepartUserList improper authorization Affected: through 3.8.2 |
| CVE-2022-45205 | 5.3 | Nov 25 | Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData Affected: 3.4.3 |
| CVE-2025-15121 | 4.9 | Dec 28 | JeecgBoot getDeptRoleByUserId information disclosure Affected: through 3.9.0 |
| CVE-2026-2111 | 4.3 | Feb 7 | JeecgBoot Retrieval-Augmented Generation edit path traversal Affected: through 3.9.0 |
| CVE-2022-45210 | 4.3 | Nov 25 | Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/deleteRecycleBin Affected: 3.4.3 |
| CVE-2022-45208 | 4.3 | Nov 25 | Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/putRecycleBin Affected: 3.4.3 |
Showing 19