Priority MEDIUM 52
A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01591 · Published 2026-04-01 · No fix listed CWE-77
Priority MEDIUM 50
There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00539 · Published 2026-04-01 · No fix listed CWE-94
Priority MEDIUM 57
A weakness has been identified in JeecgBoot 3.9.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0029 · Published 2026-02-22 · No fix listed CWE-918
Priority MEDIUM 57
A security vulnerability has been detected in JeecgBoot up to 3.9.1.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00406 · Published 2026-02-20 · No fix listed CWE-74
Priority MEDIUM 45
A weakness has been identified in JeecgBoot 3.9.1.
CVSS 4.0LOW 2.3· Network · Low privileges · No interaction · EPSS 0.00368 · Published 2026-02-16 · No fix listed CWE-20
Priority LOW 25
A weakness has been identified in JeecgBoot up to 3.9.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00614 · Published 2026-02-07 · No fix listed CWE-22
Priority MEDIUM 57
A vulnerability was identified in JeecgBoot 3.9.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00493 · Published 2026-02-02 · No fix listed CWE-74
Priority MEDIUM 45
A weakness has been identified in JeecgBoot up to 3.9.0.
CVSS 4.0LOW 2.3· Network · Low privileges · No interaction · EPSS 0.00389 · Published 2025-12-28 · No fix listed CWE-266
Priority MEDIUM 45
A security flaw has been discovered in JeecgBoot up to 3.9.0.
CVSS 4.0LOW 2.3· Network · Low privileges · No interaction · EPSS 0.00314 · Published 2025-12-28 · No fix listed CWE-266
Priority MEDIUM 45
A vulnerability was identified in JeecgBoot up to 3.9.0.
CVSS 4.0LOW 2.3· Network · Low privileges · No interaction · EPSS 0.00314 · Published 2025-12-28 · No fix listed CWE-266
Priority MEDIUM 45
A vulnerability was determined in JeecgBoot up to 3.9.0.
CVSS 4.0LOW 2.3· Network · Low privileges · No interaction · EPSS 0.00314 · Published 2025-12-28 · No fix listed CWE-266
Priority MEDIUM 45
A vulnerability was found in JeecgBoot up to 3.9.0.
CVSS 4.0LOW 2.3· Network · Low privileges · No interaction · EPSS 0.00314 · Published 2025-12-28 · No fix listed CWE-266
Priority MEDIUM 55
A vulnerability has been found in JeecgBoot up to 3.9.0.
CVSS 4.0MEDIUM 4.8· Adjacent network · High privileges · No interaction · EPSS 0.00415 · Published 2025-12-28 · No fix listed CWE-200
Priority MEDIUM 45
A flaw has been found in JeecgBoot up to 3.9.0.
CVSS 4.0LOW 2.3· Network · Low privileges · No interaction · EPSS 0.00326 · Published 2025-12-28 · No fix listed CWE-266
Priority MEDIUM 45
A vulnerability was detected in JeecgBoot up to 3.9.0.
CVSS 4.0LOW 2.3· Network · Low privileges · No interaction · EPSS 0.00276 · Published 2025-12-28 · No fix listed CWE-266
Priority MEDIUM 57
A weakness has been identified in JeecgBoot up to 3.9.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00506 · Published 2025-12-19 · No fix listed CWE-1018
Priority MEDIUM 57
A security flaw has been discovered in JeecgBoot up to 3.9.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00347 · Published 2025-12-19 · No fix listed CWE-287
Priority MEDIUM 61
Jeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability.
CVSS 3.1MEDIUM 6.3· Network · No auth · User interaction · EPSS 0.00262 · Published 2025-10-01 · No fix listed CWE-24
Priority MEDIUM 61
Jeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability.
CVSS 3.1MEDIUM 6.3· Network · No auth · User interaction · EPSS 0.00262 · Published 2025-10-01 · No fix listed CWE-24
Priority LOW 24
A vulnerability was detected in JeecgBoot up to 3.8.2.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00409 · Published 2025-09-26 · No fix listed CWE-266
Priority LOW 24
A security vulnerability has been detected in JeecgBoot up to 3.8.2.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00423 · Published 2025-09-25 · No fix listed CWE-266
Priority LOW 24
A weakness has been identified in JeecgBoot up to 3.8.2.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00409 · Published 2025-09-25 · No fix listed CWE-266
Priority LOW 24
A security flaw has been discovered in JeecgBoot up to 3.8.2.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00409 · Published 2025-09-25 · No fix listed CWE-266
Priority MEDIUM 45
A vulnerability was identified in JeecgBoot up to 3.8.2.
CVSS 4.0LOW 2.3· Network · Low privileges · No interaction · EPSS 0.00398 · Published 2025-09-25 · No fix listed CWE-266
Priority MEDIUM 45
A vulnerability was determined in JeecgBoot up to 3.8.2.
CVSS 4.0LOW 2.3· Network · Low privileges · No interaction · EPSS 0.00383 · Published 2025-09-25 · No fix listed CWE-266
Load more
THREATIST.IORead the docs