Login Request a demo
JI
Product
Jimureport
by Jeecg · last CVE Jan 8, 2026
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 6High 0Medium 1Low 0
Severity
All severities7Critical6High0Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Jimureport to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-66913
9.8
1%
Jan 8
JimuReport thru version 2.1.3 is vulnerable to remote code execution when processing user-controlled H2 JDBC URLs
Affected: through 2.1.3
CVE-2025-10771
9.8
1%
Sep 21
jeecgboot JimuReport DB2 JDBC testConnection deserialization
Affected: through 2.1.2
CVE-2025-8963
9.8
1%
Aug 14
jeecgboot JimuReport Data Large Screen Template testConnection deserialization
Affected: through 2.1.1
CVE-2024-44893
9.8
1%
Sep 10
An issue in the component /jeecg-boot/jmreport/dict/list of JimuReport v1.7.8 allows attacker to escalate privileges via a crafted GET request
Affected: 1.7.8
CVE-2023-6307
9.8
1%
Nov 27
A vulnerability classified as critical was found in jeecgboot JimuReport up to 1.6.1
Affected: through 1.6.1
CVE-2023-4450
9.8
12%
Aug 21
A vulnerability was found in jeecgboot JimuReport up to 1.6.0
Affected: before 1.6.1
CVE-2025-10770
6.5
0%
Sep 21
jeecgboot JimuReport MySQL JDBC testConnection deserialization
Affected: through 2.1.2
Showing 7