Records180All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical26CVSS 9.0–10.0
CVSS high21CVSS 7.0–8.9
Exploited now
jeecgboot records in CISA KEVNo jeecgboot vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 82
JimuReport thru version 2.1.3 is vulnerable to remote code execution when processing user-controlled H2 JDBC URLs.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01098 · Published 2026-01-08 · No fix listed CWE-94
Priority MEDIUM 62
A vulnerability was found in jeecgboot JimuReport up to 1.6.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.11595 · Published 2023-08-21 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability was determined in jeecgboot JimuReport up to 2.1.2.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00621 · Published 2025-09-21 · No fix listed CWE-20
Priority MEDIUM 57
A vulnerability was found in jeecgboot JimuReport up to 2.1.2.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0044 · Published 2025-09-21 · No fix listed CWE-20
Priority MEDIUM 49
An issue in the component /jeecg-boot/jmreport/dict/list of JimuReport v1.7.8 allows attacker to escalate privileges via a crafted GET request.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00528 · Published 2024-09-10 · No fix listed CWE-269
Priority MEDIUM 44
A vulnerability classified as critical was found in jeecgboot JimuReport up to 1.6.1.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0084 · Published 2023-11-27 · No fix listed CWE-23
Priority LOW 25
A vulnerability was determined in jeecgboot JimuReport up to 2.1.1.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00553 · Published 2025-08-14 · No fix listed CWE-20
THREATIST.IORead the docs