Browse CVEs

MEDIUM 6.5 CVE-2026-2945 A weakness has been identified in JeecgBoot 3.9.0. Affected by this vulnerability is an unknown functionality of the file /sys/common/uploadImgByHttp… Jeecg Boot No fix yet Fix from $1,6002026-02-22 HIGH 7.5 CVE-2026-2555 A weakness has been identified in JeecgBoot 3.9.1. This vulnerability affects the function importDocumentFromZip of the file org/jeecg/modules/airag/… Jeecg Boot No fix yet Fix from $1,9502026-02-16 HIGH 8.8 CVE-2026-1746 A vulnerability was identified in JeecgBoot 3.9.0. This vulnerability affects unknown code of the file /JeecgBoot/sys/api/loadDictItemByKeyword of th… Jeecg Boot No fix yet Fix from $1,9502026-02-02 CRITICAL 9.8 CVE-2024-48307EPSS 44% JeecgBoot v3.7.1 was discovered to contain a SQL injection vulnerability via the component /onlDragDatasetHead/getTotalData. Jeecg Boot No fix yet Fix from $2,3002024-10-31 CRITICAL 9.8 CVE-2024-44893 An issue in the component /jeecg-boot/jmreport/dict/list of JimuReport v1.7.8 allows attacker to escalate privileges via a crafted GET request. Jimureport No fix yet Fix from $2,3002024-09-10 MEDIUM 6.5 CVE-2023-47467 Directory Traversal vulnerability in jeecg-boot v.3.6.0 allows a remote privileged attacker to obtain sensitive information via the file directory st… Jeecg Boot Mitigation only Fix from $1,6002023-11-22 CRITICAL 9.8 CVE-2023-40989 SQL injection vulnerbility in jeecgboot jeecg-boot v 3.0, 3.5.3 that allows a remote attacker to execute arbitrary code via a crafted request to the … Jeecg Boot Mitigation only Fix from $2,3002023-09-22 CRITICAL 9.8 CVE-2023-34659EPSS 12% jeecg-boot 3.5.0 and 3.5.1 have a SQL injection vulnerability the id parameter of the /jeecg-boot/jmreport/show interface. Jeecg Boot No fix yet Fix from $2,3002023-06-16 MEDIUM 6.5 CVE-2023-34660 jjeecg-boot V3.5.0 has an unauthorized arbitrary file upload in /jeecg-boot/jmreport/upload interface. Jeecg Boot No fix yet Fix from $1,6002023-06-16 CRITICAL 9.8 CVE-2023-1784 A vulnerability was found in jeecg-boot 3.5.0 and classified as critical. This issue affects some unknown processing of the component API Documentati… Jeecg Boot Mitigation only Fix from $2,3002023-03-31 CRITICAL 9.8 CVE-2023-1741 A vulnerability was found in jeecg-boot 3.5.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the… Jeecg Boot Mitigation only Fix from $2,3002023-03-30 CRITICAL 9.8 CVE-2023-1454EPSS 36% A vulnerability classified as critical has been found in jeecg-boot 3.5.0. This affects an unknown part of the file jmreport/qurestSql. The manipulat… Jeecg Boot No fix yet Fix from $2,3002023-03-17 HIGH 8.8 CVE-2023-24789 jeecg-boot v3.4.4 was discovered to contain an authenticated SQL injection vulnerability via the building block report component. Jeecg No fix yet Fix from $1,9502023-03-06 CRITICAL 9.8 CVE-2022-45206 Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/duplicate/check. Jeecg Boot Mitigation only Fix from $2,3002022-11-25 CRITICAL 9.8 CVE-2022-45207 Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component updateNullByEmptyString. Jeecg Boot Mitigation only Fix from $2,3002022-11-25 MEDIUM 5.3 CVE-2022-45205 Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData. Jeecg Boot No fix yet Fix from $1,6002022-11-25 CRITICAL 9.8 CVE-2022-2647 A vulnerability was found in jeecg-boot. It has been declared as critical. This vulnerability affects unknown code of the file /api/. The manipulatio… Jeecg Boot Mitigation only Fix from $2,3002022-08-04 MEDIUM 6.1 CVE-2021-44585 A Cross Site Scripting (XSS) vulnerabilitiy exits in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event. Jeecg Boot No fix yet Fix from $1,6002022-03-10 CRITICAL 9.8 CVE-2021-46089 In JeecgBoot 3.0, there is a SQL injection vulnerability that can operate the database with root privileges. Jeecg Boot No fix yet Fix from $2,3002022-01-25 HIGH 7.5 CVE-2020-20948 An arbitrary file download vulnerability in jeecg v3.8 allows attackers to access sensitive files via modification of the "localPath" variable. Jeecg No fix yet Fix from $1,9502021-12-27 CRITICAL 9.8 CVE-2020-28088 An arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code. Jeecg Boot No fix yet Fix from $2,3002021-08-06 HIGH 7.5 CVE-2020-28087 A SQL injection vulnerability in /jeecg boot/sys/dict/loadtreedata of jeecg-boot CMS 2.3 allows attackers to access sensitive database information. Jeecg Boot No fix yet Fix from $1,9502021-08-06