Vulnerabilities

TI-2025-41083 CVE-2025-66913 · GHSA-4993-v2g9-96m4

JimuReport thru version 2.1.3 is vulnerable to remote code execution when processing…

HIGH 82

JimuReport thru version 2.1.3 is vulnerable to remote code execution when processing user-controlled H2 JDBC URLs.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01098 Published 2026-01-08 No fix listed CWE-94

TI-2025-09862 CVE-2025-10771 · GHSA-5vxh-cm9f-9j4r

MEDIUM 57

A vulnerability was determined in jeecgboot JimuReport up to 2.1.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00621 Published 2025-09-21 No fix listed CWE-20

TI-2025-09861 CVE-2025-10770 · GHSA-h37v-5vfh-278x

MEDIUM 57

A vulnerability was found in jeecgboot JimuReport up to 2.1.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0044 Published 2025-09-21 No fix listed CWE-20

TI-2025-08210 CVE-2025-8963 · GHSA-jwrp-6c28-gjv2

LOW 25

A vulnerability was determined in jeecgboot JimuReport up to 2.1.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00553 Published 2025-08-14 No fix listed CWE-20

TI-2024-30030 CVE-2024-44893 · GHSA-wpwg-4rvh-5q27

MEDIUM 49

An issue in the component /jeecg-boot/jmreport/dict/list of JimuReport v1.7.8 allows attacker to escalate privileges via a crafted GET request.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00528 Published 2024-09-10 No fix listed CWE-269

TI-2023-05790 CVE-2023-6307 · GHSA-chj8-m2c2-f36w

MEDIUM 44

A vulnerability classified as critical was found in jeecgboot JimuReport up to 1.6.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0084 Published 2023-11-27 No fix listed CWE-23

TI-2023-04108 CVE-2023-4450 · GHSA-j8h5-8rrr-m6j9

MEDIUM 62

A vulnerability was found in jeecgboot JimuReport up to 1.6.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.11595 Published 2023-08-21 No fix listed CWE-74