Vulnerability index

Browse CVEs

22 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Jeecg Boot MEDIUM 6.5
CVE-2026-2945

A weakness has been identified in JeecgBoot 3.9.0. Affected by this vulnerability is an unknown functionality of the file /sys/common/uploadImgByHttp…

No fix yet
Fix from $1,600 2026-02-22
Jeecg Boot HIGH 7.5
CVE-2026-2555

A weakness has been identified in JeecgBoot 3.9.1. This vulnerability affects the function importDocumentFromZip of the file org/jeecg/modules/airag/…

No fix yet
Fix from $1,950 2026-02-16
Jeecg Boot HIGH 8.8
CVE-2026-1746

A vulnerability was identified in JeecgBoot 3.9.0. This vulnerability affects unknown code of the file /JeecgBoot/sys/api/loadDictItemByKeyword of th…

No fix yet
Fix from $1,950 2026-02-02
Jeecg Boot CRITICAL 9.8
CVE-2024-48307EPSS 44%

JeecgBoot v3.7.1 was discovered to contain a SQL injection vulnerability via the component /onlDragDatasetHead/getTotalData.

No fix yet
Fix from $2,300 2024-10-31
Jimureport CRITICAL 9.8
CVE-2024-44893

An issue in the component /jeecg-boot/jmreport/dict/list of JimuReport v1.7.8 allows attacker to escalate privileges via a crafted GET request.

No fix yet
Fix from $2,300 2024-09-10
Jeecg Boot MEDIUM 6.5
CVE-2023-47467

Directory Traversal vulnerability in jeecg-boot v.3.6.0 allows a remote privileged attacker to obtain sensitive information via the file directory st…

Mitigation only
Fix from $1,600 2023-11-22
Jeecg Boot CRITICAL 9.8
CVE-2023-40989

SQL injection vulnerbility in jeecgboot jeecg-boot v 3.0, 3.5.3 that allows a remote attacker to execute arbitrary code via a crafted request to the …

Mitigation only
Fix from $2,300 2023-09-22
Jeecg Boot CRITICAL 9.8
CVE-2023-34659EPSS 12%

jeecg-boot 3.5.0 and 3.5.1 have a SQL injection vulnerability the id parameter of the /jeecg-boot/jmreport/show interface.

No fix yet
Fix from $2,300 2023-06-16
Jeecg Boot MEDIUM 6.5
CVE-2023-34660

jjeecg-boot V3.5.0 has an unauthorized arbitrary file upload in /jeecg-boot/jmreport/upload interface.

No fix yet
Fix from $1,600 2023-06-16
Jeecg Boot CRITICAL 9.8
CVE-2023-1784

A vulnerability was found in jeecg-boot 3.5.0 and classified as critical. This issue affects some unknown processing of the component API Documentati…

Mitigation only
Fix from $2,300 2023-03-31
Jeecg Boot CRITICAL 9.8
CVE-2023-1741

A vulnerability was found in jeecg-boot 3.5.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the…

Mitigation only
Fix from $2,300 2023-03-30
Jeecg Boot CRITICAL 9.8
CVE-2023-1454EPSS 36%

A vulnerability classified as critical has been found in jeecg-boot 3.5.0. This affects an unknown part of the file jmreport/qurestSql. The manipulat…

No fix yet
Fix from $2,300 2023-03-17
Jeecg HIGH 8.8
CVE-2023-24789

jeecg-boot v3.4.4 was discovered to contain an authenticated SQL injection vulnerability via the building block report component.

No fix yet
Fix from $1,950 2023-03-06
Jeecg Boot CRITICAL 9.8
CVE-2022-45206

Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/duplicate/check.

Mitigation only
Fix from $2,300 2022-11-25
Jeecg Boot CRITICAL 9.8
CVE-2022-45207

Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component updateNullByEmptyString.

Mitigation only
Fix from $2,300 2022-11-25
Jeecg Boot MEDIUM 5.3
CVE-2022-45205

Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData.

No fix yet
Fix from $1,600 2022-11-25
Jeecg Boot CRITICAL 9.8
CVE-2022-2647

A vulnerability was found in jeecg-boot. It has been declared as critical. This vulnerability affects unknown code of the file /api/. The manipulatio…

Mitigation only
Fix from $2,300 2022-08-04
Jeecg Boot MEDIUM 6.1
CVE-2021-44585

A Cross Site Scripting (XSS) vulnerabilitiy exits in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event.

No fix yet
Fix from $1,600 2022-03-10
Jeecg Boot CRITICAL 9.8
CVE-2021-46089

In JeecgBoot 3.0, there is a SQL injection vulnerability that can operate the database with root privileges.

No fix yet
Fix from $2,300 2022-01-25
Jeecg HIGH 7.5
CVE-2020-20948

An arbitrary file download vulnerability in jeecg v3.8 allows attackers to access sensitive files via modification of the "localPath" variable.

No fix yet
Fix from $1,950 2021-12-27
Jeecg Boot CRITICAL 9.8
CVE-2020-28088

An arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code.

No fix yet
Fix from $2,300 2021-08-06
Jeecg Boot HIGH 7.5
CVE-2020-28087

A SQL injection vulnerability in /jeecg boot/sys/dict/loadtreedata of jeecg-boot CMS 2.3 allows attackers to access sensitive database information.

No fix yet
Fix from $1,950 2021-08-06