vciy

CVEs we hold for Jeecgboot

Records whose assigning authority named Jeecgboot as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-9604JeecgBoot AiragModelController access controln/a JeecgBoot
CVE-2026-9581JeecgBoot add access controln/a JeecgBoot
CVE-2026-9580JeecgBoot selectDepart LoginController.selectDepart access controln/a JeecgBoot
CVE-2026-9579JeecgBoot SysUser userEdit user.getUsername access controln/a JeecgBoot
CVE-2026-9373JeecgBoot OpenAPI Endpoint call improper authenticationn/a JeecgBoot
CVE-2026-86228JeecgBoot AiragModelController.java exportXls access controln/a JeecgBoot
CVE-2026-82629jeecgboot jeewx-boot doUpload Endpoint MyJwWebJwid3Controller.java MyJwWebJwid3Controller.doUpload unrestricted uploadjeecgboot jeewx-boot
CVE-2026-8196JeecgBoot mLogin Endpoint LoginController.java authorizationn/a JeecgBoot
CVE-2026-8195JeecgBoot SVG File CommonController.java cross site scriptingn/a JeecgBoot
CVE-2026-8114JeecgBoot JSON Object loadTreeData sql injectionn/a JeecgBoot
CVE-2026-7605JeecgBoot uploadImgByHttpEndpoint CommonController.java HttpFileToMultipartFileUtil.downloadImageData server-side…n/a JeecgBoot
CVE-2026-7604JeecgBoot OpenApi Service OpenApiController.java OpenApiController.call server-side request forgeryn/a JeecgBoot
CVE-2026-7603JeecgBoot LoadFile Endpoint FileDownloadUtils.jav checkPathTraversalBatch server-side request forgeryn/a JeecgBoot
CVE-2026-7602JeecgBoot FillRuleUtil edit improper authorizationn/a JeecgBoot
CVE-2026-75479JimuReport Unauthenticated Report Listing and Share Token Disclosurejeecgboot jimureport
CVE-2026-7290JeecgBoot loadDict Endpoint SqlInjectionUtil.java SqlInjectionUtil sql injectionn/a JeecgBoot
CVE-2026-5999JeecgBoot SysAnnouncementController improper authorizationn/a JeecgBoot
CVE-2026-5848jeecgboot JimuReport Data Source testConnection DriverManager.getConnection code injectionjeecgboot JimuReport
CVE-2026-58377JeecgBoot 3.9.2 - Missing Authorization on OpenAPI Credential Management Endpoints Exposes Access/Secret KeysJeecgBoot
CVE-2026-58375JimuReport 2.5.0 - Unauthenticated Report Export via /jmreport/auto/exportjeecgboot jimureport
CVE-2026-5616JeecgBoot AI Chat JeecgBizToolsProvider.java missing authenticationn/a JeecgBoot
CVE-2026-3672JeecgBoot getDictItems isExistSqlInjectKeyword sql injectionn/a JeecgBoot
CVE-2026-2945JeecgBoot uploadImgByHttp server-side request forgeryn/a JeecgBoot
CVE-2026-2822JeecgBoot Backend airag_app,1,create_by sql injectionn/a JeecgBoot
CVE-2026-2555JeecgBoot Retrieval-Augmented Generation AiragKnowledgeController.java importDocumentFromZip deserializationn/a JeecgBoot
CVE-2026-2111JeecgBoot Retrieval-Augmented Generation edit path traversaln/a JeecgBoot
CVE-2026-19000JeecgBoot Anonymous Chat Attachment send server-side request forgeryn/a JeecgBoot
CVE-2026-1746JeecgBoot Online Report API loadDictItemByKeyword sql injectionn/a JeecgBoot
CVE-2026-11502JeecgBoot Third-Party Login ThirdLoginController.java HttpServletResponse.sendRedirect redirectn/a JeecgBoot
CVE-2026-11464JeecgBoot User List Endpoint SysUserController.java queryPageList information disclosuren/a JeecgBoot
CVE-2026-10241jeecgboot The server processes these URLs Cloud Instance Metadata Endpoint debug FileDownloadUtils.download2DiskFromNet…jeecgboot The server processes these URLs
CVE-2026-10240JeecgBoot test server-side request forgeryn/a JeecgBoot
CVE-2026-10239JeecgBoot edit WordUtil.addImage server-side request forgeryn/a JeecgBoot
CVE-2025-8963jeecgboot JimuReport Data Large Screen Template testConnection deserializationjeecgboot JimuReport
CVE-2025-4533JeecgBoot Document Library Upload zip unzipFile resource consumptionn/a JeecgBoot
CVE-2025-15126JeecgBoot getPositionUserList improper authorizationn/a JeecgBoot
CVE-2025-15125JeecgBoot queryDepartPermission improper authorizationn/a JeecgBoot
CVE-2025-15124JeecgBoot list getParameterMap improper authorizationn/a JeecgBoot
CVE-2025-15123JeecgBoot datarule improper authorizationn/a JeecgBoot
CVE-2025-15122JeecgBoot datarule loadDatarule improper authorizationn/a JeecgBoot
CVE-2025-15121JeecgBoot getDeptRoleByUserId information disclosuren/a JeecgBoot
CVE-2025-15120JeecgBoot getDeptRoleList improper authorizationn/a JeecgBoot
CVE-2025-15119JeecgBoot list queryPageList improper authorizationn/a JeecgBoot
CVE-2025-14909JeecgBoot SysUserOnlineController.java SysUserOnlineController user sessionn/a JeecgBoot
CVE-2025-14908JeecgBoot Multi-Tenant Management SysTenantController.java improper authenticationn/a JeecgBoot
CVE-2025-12626jeecgboot jeewx-boot WxActGoldeneggsPrizesController.java getImgUrl path traversaljeecgboot jeewx-boot
CVE-2025-10981JeecgBoot exportXls improper authorizationn/a JeecgBoot
CVE-2025-10980JeecgBoot exportXls improper authorizationn/a JeecgBoot
CVE-2025-10979JeecgBoot exportXls improper authorizationn/a JeecgBoot
CVE-2025-10978JeecgBoot Filter exportXls improper authorizationn/a JeecgBoot
CVE-2025-10977JeecgBoot deleteBatch improper authorizationn/a JeecgBoot
CVE-2025-10976JeecgBoot getDepartUserList improper authorizationn/a JeecgBoot
CVE-2025-10771jeecgboot JimuReport DB2 JDBC testConnection deserializationjeecgboot JimuReport
CVE-2025-10770jeecgboot JimuReport MySQL JDBC testConnection deserializationjeecgboot JimuReport
CVE-2025-10707JeecgBoot sendMsg improper authorizationn/a JeecgBoot
CVE-2025-10319JeecgBoot Tenant Log Export exportLog improper authorizationn/a JeecgBoot
CVE-2025-10318JeecgBoot WebSocket Message sendWebSocketMsg improper authorizationn/a JeecgBoot
CVE-2023-6307jeecgboot JimuReport image path traversaljeecgboot JimuReport
CVE-2023-4450jeecgboot JimuReport Template injectionjeecgboot JimuReport

59 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.