Priority CRITICAL 87
jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.73398 · Published 2023-07-28 · Fixed in 3.5.3 CWE-89
Priority HIGH 82
JeecgBoot v3.7.1 was discovered to contain a SQL injection vulnerability via the component /onlDragDatasetHead/getTotalData.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.50298 · Published 2024-10-31 · No fix listed CWE-89
Priority HIGH 82
Jeecg boot up to v3.5.3 was discovered to contain a SQL injection vulnerability via the component /jeecg-boot/jmreport/show.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00905 · Published 2023-09-08 · No fix listed CWE-89
Priority HIGH 82
SQL injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the jmreport/qurestSql component.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00857 · Published 2023-12-30 · No fix listed CWE-89
Priority HIGH 82
jeecg-boot 3.5.0 and 3.5.1 have a SQL injection vulnerability the id parameter of the /jeecg-boot/jmreport/show interface.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.1248 · Published 2023-06-16 · No fix listed CWE-89
Priority HIGH 82
Jeecg-boot v3.4.4 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01077 · Published 2023-01-19 · No fix listed CWE-89
Priority HIGH 82
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component updateNullByEmptyString.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00997 · Published 2022-11-25 · Fixed in 3.4.4 CWE-89
Priority HIGH 82
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/duplicate/check.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00799 · Published 2022-11-25 · Fixed in 3.4.4 CWE-89
Priority HIGH 72
Jeecg boot up to v3.5.3 was discovered to contain an arbitrary file read vulnerability via the interface /testConnection.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00929 · Published 2023-09-08 · No fix listed CWE-22
Priority HIGH 68
A vulnerability classified as critical has been found in jeecg-boot 3.5.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.36072 · Published 2023-03-17 · No fix listed CWE-89
Priority MEDIUM 63
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00654 · Published 2022-11-25 · No fix listed CWE-89
Priority MEDIUM 61
Jeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability.
CVSS 3.1MEDIUM 6.3· Network · No auth · User interaction · EPSS 0.00262 · Published 2025-10-01 · No fix listed CWE-24
Priority MEDIUM 61
Jeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability.
CVSS 3.1MEDIUM 6.3· Network · No auth · User interaction · EPSS 0.00262 · Published 2025-10-01 · No fix listed CWE-24
Priority MEDIUM 58
SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PG_Sleep, DBMS_Lock.Sleep, Waitfor, DECODE, and DBMS_PIPE.RECEIVE_MESSAGE functions.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00297 · Published 2023-08-17 · No fix listed CWE-89
Priority MEDIUM 57
A weakness has been identified in JeecgBoot 3.9.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0029 · Published 2026-02-22 · No fix listed CWE-918
Priority MEDIUM 57
A security vulnerability has been detected in JeecgBoot up to 3.9.1.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00406 · Published 2026-02-20 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability was identified in JeecgBoot 3.9.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00493 · Published 2026-02-02 · No fix listed CWE-74
Priority MEDIUM 57
A weakness has been identified in JeecgBoot up to 3.9.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00506 · Published 2025-12-19 · No fix listed CWE-1018
Priority MEDIUM 57
A security flaw has been discovered in JeecgBoot up to 3.9.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00347 · Published 2025-12-19 · No fix listed CWE-287
Priority MEDIUM 57
A weakness has been identified in JeecgBoot up to 3.8.2.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00406 · Published 2025-09-19 · No fix listed CWE-266
Priority MEDIUM 57
A security flaw has been discovered in JeecgBoot up to 3.8.2.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00331 · Published 2025-09-12 · No fix listed CWE-266
Priority MEDIUM 57
A vulnerability was identified in JeecgBoot up to 3.8.2.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00441 · Published 2025-09-12 · No fix listed CWE-266
Priority MEDIUM 56
A vulnerability classified as problematic was found in JeecgBoot up to 3.8.0.
CVSS 4.0MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00787 · Published 2025-05-11 · No fix listed CWE-400
Priority MEDIUM 55
A vulnerability has been found in JeecgBoot up to 3.9.0.
CVSS 4.0MEDIUM 4.8· Adjacent network · High privileges · No interaction · EPSS 0.00415 · Published 2025-12-28 · No fix listed CWE-200
Priority MEDIUM 53
SQL injection vulnerbility in jeecgboot jeecg-boot v 3.0, 3.5.3 that allows a remote attacker to execute arbitrary code via a crafted request to the report/jeecgboot/jmreport/queryFieldBySql component.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02186 · Published 2023-09-22 · Fixed in 3.6.0 CWE-89
Load more
THREATIST.IORead the docs