Login Request a demo
JE
Vendor
Jeecg
4 products with CVEs on record
72
CVEs
0
On KEV
0
New 30D
Products
JB
Jeecg Boot
Jeecg
9.8
57 CVEs0 on KEV0 new
JI
Jimureport
Jeecg
9.8
7 CVEs0 on KEV0 new
JE
Jeecg
Jeecg
9.8
6 CVEs0 on KEV0 new
JE
Jeecgboot
Jeecg
7.5
2 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2024-43028
JB
Jeecg Boot
Jeecg
9.8
2%
Apr 1A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request
CVE-2024-40489
JB
Jeecg Boot
Jeecg
9.8
1%
Apr 1There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through…
CVE-2026-2945
JB
Jeecg Boot
Jeecg
6.5
0%
Feb 22JeecgBoot uploadImgByHttp server-side request forgery
CVE-2026-2822
JB
Jeecg Boot
Jeecg
8.8
0%
Feb 20JeecgBoot Backend airag_app,1,create_by sql injection
CVE-2026-2555
JB
Jeecg Boot
Jeecg
7.5
0%
Feb 16JeecgBoot Retrieval-Augmented Generation AiragKnowledgeController.java importDocumentFromZip deserialization
CVE-2026-2111
JB
Jeecg Boot
Jeecg
4.3
1%
Feb 7JeecgBoot Retrieval-Augmented Generation edit path traversal
CVE-2026-1746
JB
Jeecg Boot
Jeecg
8.8
0%
Feb 2JeecgBoot Online Report API loadDictItemByKeyword sql injection
CVE-2025-66913
JI
Jimureport
Jeecg
9.8
1%
Jan 8JimuReport thru version 2.1.3 is vulnerable to remote code execution when processing user-controlled H2 JDBC URLs
CVE-2025-15126
JB
Jeecg Boot
Jeecg
7.5
0%
Dec 28JeecgBoot getPositionUserList improper authorization
CVE-2025-15125
JB
Jeecg Boot
Jeecg
3.1
0%
Dec 28JeecgBoot queryDepartPermission improper authorization
CVE-2025-15124
JB
Jeecg Boot
Jeecg
3.1
0%
Dec 28JeecgBoot list getParameterMap improper authorization
CVE-2025-15123
JB
Jeecg Boot
Jeecg
3.1
0%
Dec 28JeecgBoot datarule improper authorization
CVE-2025-15122
JB
Jeecg Boot
Jeecg
3.1
0%
Dec 28JeecgBoot datarule loadDatarule improper authorization
CVE-2025-15121
JB
Jeecg Boot
Jeecg
4.9
0%
Dec 28JeecgBoot getDeptRoleByUserId information disclosure
CVE-2025-15120
JB
Jeecg Boot
Jeecg
3.1
0%
Dec 28JeecgBoot getDeptRoleList improper authorization
CVE-2025-15119
JB
Jeecg Boot
Jeecg
3.1
0%
Dec 28JeecgBoot list queryPageList improper authorization
CVE-2025-14909
JB
Jeecg Boot
Jeecg
8.1
1%
Dec 19JeecgBoot SysUserOnlineController.java SysUserOnlineController user session
CVE-2025-14908
JB
Jeecg Boot
Jeecg
8.1
0%
Dec 19JeecgBoot Multi-Tenant Management SysTenantController.java improper authentication
CVE-2025-61188
JB
Jeecg Boot
Jeecg
6.3
0%
Oct 1Jeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability
CVE-2025-61189
JB
Jeecg Boot
Jeecg
6.3
0%
Oct 1Jeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability
CVE-2025-10981
JB
Jeecg Boot
Jeecg
6.5
0%
Sep 26JeecgBoot exportXls improper authorization
CVE-2025-10980
JB
Jeecg Boot
Jeecg
6.5
0%
Sep 25JeecgBoot exportXls improper authorization
CVE-2025-10979
JB
Jeecg Boot
Jeecg
6.5
0%
Sep 25JeecgBoot exportXls improper authorization
CVE-2025-10978
JB
Jeecg Boot
Jeecg
6.5
0%
Sep 25JeecgBoot Filter exportXls improper authorization
CVE-2025-10977
JB
Jeecg Boot
Jeecg
5.3
0%
Sep 25JeecgBoot deleteBatch improper authorization
CVE-2025-10976
JB
Jeecg Boot
Jeecg
5.3
0%
Sep 25JeecgBoot getDepartUserList improper authorization
CVE-2025-10771
JI
Jimureport
Jeecg
9.8
1%
Sep 21jeecgboot JimuReport DB2 JDBC testConnection deserialization
CVE-2025-10770
JI
Jimureport
Jeecg
6.5
0%
Sep 21jeecgboot JimuReport MySQL JDBC testConnection deserialization
CVE-2025-10707
JB
Jeecg Boot
Jeecg
8.8
0%
Sep 19JeecgBoot sendMsg improper authorization
CVE-2025-10319
JB
Jeecg Boot
Jeecg
6.5
0%
Sep 12JeecgBoot Tenant Log Export exportLog improper authorization
CVE-2025-10318
JB
Jeecg Boot
Jeecg
8.8
0%
Sep 12JeecgBoot WebSocket Message sendWebSocketMsg improper authorization
CVE-2025-8963
JI
Jimureport
Jeecg
9.8
1%
Aug 14jeecgboot JimuReport Data Large Screen Template testConnection deserialization
CVE-2025-4533
JB
Jeecg Boot
Jeecg
7.5
1%
May 11JeecgBoot Document Library Upload zip unzipFile resource consumption
CVE-2024-48307
JB
Jeecg Boot
Jeecg
9.8
50%
Oct 31JeecgBoot v3.7.1 was discovered to contain a SQL injection vulnerability via the component /onlDragDatasetHead/getTotalData
CVE-2024-44893
JI
Jimureport
Jeecg
9.8
1%
Sep 10An issue in the component /jeecg-boot/jmreport/dict/list of JimuReport v1.7.8 allows attacker to escalate privileges via a crafted GET request
CVE-2023-49442
JE
Jeecg
Jeecg
9.8
39%
Jan 3Deserialization of Untrusted Data in jeecgFormDemoController in JEECG 4.0 and earlier allows attackers to run arbitrary code via crafted POST request
CVE-2023-41544
JB
Jeecg Boot
Jeecg
9.8
3%
Dec 30SSTI injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to execute arbitrary code via crafted HTTP request to the /jmreport/loadTableData component
CVE-2023-41543
JB
Jeecg Boot
Jeecg
9.8
1%
Dec 30SQL injection vulnerability in jeecg-boot v3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the component /sys/replicate/check
CVE-2023-41542
JB
Jeecg Boot
Jeecg
9.8
1%
Dec 30SQL injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the jmreport/qurestSql component
CVE-2023-6307
JI
Jimureport
Jeecg
9.8
1%
Nov 27A vulnerability classified as critical was found in jeecgboot JimuReport up to 1.6.1
CVE-2023-47467
JB
Jeecg Boot
Jeecg
6.5
1%
Nov 22Directory Traversal vulnerability in jeecg-boot v.3.6.0 allows a remote privileged attacker to obtain sensitive information via the file directory structure
CVE-2023-40989
JB
Jeecg Boot
Jeecg
9.8
2%
Sep 22SQL injection vulnerbility in jeecgboot jeecg-boot v 3.0, 3.5.3 that allows a remote attacker to execute arbitrary code via a crafted request to the…
CVE-2023-42268
JB
Jeecg Boot
Jeecg
9.8
1%
Sep 8Jeecg boot up to v3.5.3 was discovered to contain a SQL injection vulnerability via the component /jeecg-boot/jmreport/show
CVE-2023-41578
JB
Jeecg Boot
Jeecg
7.5
1%
Sep 8Jeecg boot up to v3.5.3 was discovered to contain an arbitrary file read vulnerability via the interface /testConnection
CVE-2023-4450
JI
Jimureport
Jeecg
9.8
12%
Aug 21A vulnerability was found in jeecgboot JimuReport up to 1.6.0
CVE-2023-38905
JB
Jeecg Boot
Jeecg
5.5
0%
Aug 17SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PG_Sleep, DBMS_Lock.Sleep, Waitfor, DECODE,…
CVE-2023-38992
JB
Jeecg Boot
Jeecg
9.8
73%
Jul 28jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData
CVE-2023-34603
JE
Jeecgboot
Jeecg
7.5
1%
Jun 19JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryFilterTableDictInfo at org.jeecg.modules.api.controller.SystemApiController
CVE-2023-34602
JE
Jeecgboot
Jeecg
7.5
1%
Jun 19JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryTableDictItemsByCode at org.jeecg.modules.api.controller.SystemApiController
CVE-2023-34660
JB
Jeecg Boot
Jeecg
6.5
1%
Jun 16jjeecg-boot V3.5.0 has an unauthorized arbitrary file upload in /jeecg-boot/jmreport/upload interface
CVE-2023-34659
JB
Jeecg Boot
Jeecg
9.8
12%
Jun 16jeecg-boot 3.5.0 and 3.5.1 have a SQL injection vulnerability the id parameter of the /jeecg-boot/jmreport/show interface
CVE-2023-1784
JB
Jeecg Boot
Jeecg
9.8
1%
Mar 31A vulnerability was found in jeecg-boot 3.5.0 and classified as critical
CVE-2023-1741
JB
Jeecg Boot
Jeecg
9.8
1%
Mar 30A vulnerability was found in jeecg-boot 3.5.0
CVE-2023-1454
JB
Jeecg Boot
Jeecg
9.8
36%
Mar 17A vulnerability classified as critical has been found in jeecg-boot 3.5.0
CVE-2023-24789
JE
Jeecg
Jeecg
8.8
1%
Mar 6jeecg-boot v3.4.4 was discovered to contain an authenticated SQL injection vulnerability via the building block report component
CVE-2021-37306
JE
Jeecg
Jeecg
7.5
1%
Feb 3An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via api uri: api…
CVE-2021-37305
JE
Jeecg
Jeecg
7.5
4%
Feb 3An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via api uri:…
CVE-2021-37304
JE
Jeecg
Jeecg
7.5
4%
Feb 3An Insecure Permissions issue in jeecg-boot 2.4.5 allows unauthenticated remote attackers to gain escalated privilege and view sensitive information via the httptrace interface
CVE-2022-47105
JB
Jeecg Boot
Jeecg
9.8
1%
Jan 19Jeecg-boot v3.4.4 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData
CVE-2022-45210
JB
Jeecg Boot
Jeecg
4.3
1%
Nov 25Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/deleteRecycleBin