Browse CVEs

HIGH 8.1 CVE-2026-3405 A vulnerability has been found in thinkgem JeeSite up to 5.15.1. The affected element is an unknown function of the component Connection Handler. The… Jeesite after 5.15.1 Fix from $1,9502026-03-02 HIGH 8.1 CVE-2026-3404 A flaw has been found in thinkgem JeeSite up to 5.15.1. Impacted is an unknown function of the file /com/jeesite/common/shiro/cas/CasOutHandler.java … Jeesite after 5.15.1 Fix from $1,9502026-03-02 MEDIUM 5.4 CVE-2025-7865 A vulnerability was found in thinkgem JeeSite up to 5.12.0. It has been declared as problematic. This vulnerability affects the function xssFilter of… Jeesite after 5.12.0 Fix from $1,6002025-07-20 MEDIUM 5.4 CVE-2025-7864 A vulnerability was found in thinkgem JeeSite up to 5.12.0. It has been classified as critical. This affects the function Upload of the file src/main… Jeesite 5.12.1+ Fix from $1,6002025-07-20 HIGH 8.8 CVE-2025-7759 A vulnerability was identified in thinkgem JeeSite up to 5.12.0. This vulnerability affects unknown code of the file modules/core/src/main/java/com/j… Jeesite 5.12.1+ Fix from $1,9502025-07-17 HIGH 8.8 CVE-2025-5186 A vulnerability was found in thinkgem JeeSite up to 5.11.1. It has been rated as critical. Affected by this issue is the function ResourceLoader.getR… Jeesite after 5.11.1 Fix from $1,9502025-05-26 MEDIUM 6.1 CVE-2024-8112 A vulnerability was found in thinkgem JeeSite 5.3. It has been rated as problematic. This issue affects some unknown processing of the file /js/a/log… Jeesite No fix yet Fix from $1,6002024-08-23 MEDIUM 5.4 CVE-2023-38991 An issue in the delete function in the ActModelController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete models created… Jeesite No fix yet Fix from $1,6002023-08-04 CRITICAL 9.8 CVE-2023-34601 Jeesite before commit 10742d3 was discovered to contain a SQL injection vulnerability via the component ${businessTable} at /act/ActDao.xml. Jeesite 2023-05-27+ Fix from $2,3002023-06-22 CRITICAL 9.8 CVE-2020-19229 Jeesite 1.2.7 uses the apache shiro version 1.2.3 affected by CVE-2016-4437. Because of this version of the java deserialization vulnerability, an at… Jeesite No fix yet Fix from $2,3002022-04-05 MEDIUM 6.5 CVE-2019-1010201 Jeesite 1.2.7 is affected by: SQL Injection. The impact is: sensitive information disclosure. The component is: updateProcInsIdByBusinessId() functio… Jeesite Mitigation only Fix from $1,6002019-07-23 MEDIUM 6.5 CVE-2019-1010202 Jeesite 1.2.7 is affected by: XML External Entity (XXE). The impact is: sensitive information disclosure. The component is: convertToModel() function… Jeesite No fix yet Fix from $1,6002019-07-23