Priority LOW 12
JeeSite 5.11.0 through 5.19.1 contains an insecure direct object reference vulnerability in the AI CMS chat module that allows authenticated users to access other users' conversations due to missing and reversed ownershi…
CVSS 4.0LOW 2.3· Network · Low privileges · No interaction · EPSS 0.0027 · Published 2026-10-29 · No fix listed CWE-639
Priority MEDIUM 45
A vulnerability has been found in thinkgem JeeSite up to 5.15.1.
CVSS 4.0LOW 2.3· Network · Low privileges · No interaction · EPSS 0.00661 · Published 2026-03-02 · No fix listed CWE-22
Priority MEDIUM 45
A flaw has been found in thinkgem JeeSite up to 5.15.1.
CVSS 4.0LOW 2.3· Network · Low privileges · No interaction · EPSS 0.00398 · Published 2026-03-02 · No fix listed CWE-610
Priority MEDIUM 56
A vulnerability was found in thinkgem JeeSite up to 5.12.1.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00379 · Published 2025-09-01 · Fixed in 5.13.0 CWE-79
Priority MEDIUM 56
A vulnerability was found in thinkgem JeeSite up to 5.12.0.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00369 · Published 2025-07-20 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability was found in thinkgem JeeSite up to 5.12.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00367 · Published 2025-07-20 · No fix listed CWE-284
Priority MEDIUM 56
A vulnerability was found in thinkgem JeeSite up to 5.12.0 and classified as problematic.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00423 · Published 2025-07-20 · No fix listed CWE-601
Priority MEDIUM 57
A vulnerability classified as problematic was found in thinkgem JeeSite up to 5.12.0.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00478 · Published 2025-07-18 · No fix listed CWE-601
Priority MEDIUM 57
A vulnerability, which was classified as problematic, was found in thinkgem JeeSite up to 5.12.0.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00495 · Published 2025-07-17 · No fix listed CWE-601
Priority MEDIUM 57
A vulnerability was identified in thinkgem JeeSite up to 5.12.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00389 · Published 2025-07-17 · No fix listed CWE-918
Priority MEDIUM 57
A vulnerability was found in thinkgem JeeSite up to 5.11.1.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0051 · Published 2025-05-26 · No fix listed CWE-918
Priority LOW 31
A vulnerability was found in thinkgem JeeSite 5.3.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00479 · Published 2024-08-23 · No fix listed CWE-79
Priority MEDIUM 58
An issue in the delete function in the ActModelController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete models created by the Administrator.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00467 · Published 2023-08-03 · No fix listed CWE-732
Priority MEDIUM 53
An issue in the delete function in the MenuController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete menus created by the Administrator.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00554 · Published 2023-08-01 · No fix listed
Priority MEDIUM 53
An issue in the delete function in the UserController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete the Administrator's role information.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00407 · Published 2023-07-31 · No fix listed CWE-862
Priority MEDIUM 53
An issue in the delete function in the OaNotifyController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete notifications created by Administrators.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00455 · Published 2023-07-28 · No fix listed
Priority HIGH 82
Jeesite before commit 10742d3 was discovered to contain a SQL injection vulnerability via the component ${businessTable} at /act/ActDao.xml.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00692 · Published 2023-06-22 · No fix listed CWE-89
Priority MEDIUM 45
Jeesite 1.2.7 uses the apache shiro version 1.2.3 affected by CVE-2016-4437.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01439 · Published 2022-04-05 · No fix listed CWE-502
Priority LOW 31
Jeesite 1.2.7 is affected by: SQL Injection.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01155 · Published 2019-07-23 · No fix listed CWE-89
Priority LOW 31
Jeesite 1.2.7 is affected by: XML External Entity (XXE).
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01312 · Published 2019-07-23 · No fix listed CWE-611
THREATIST.IORead the docs