jeecg Vulnerability Advisory Catalog

Total 72 security vulnerabilities recorded for jeecg software and firmware.

← Back to All Vendors
CVE-2024-43028 CRITICAL
Component: jeecg_boot

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a craf...

📅 2026-04-01
CVSS 9.8 Dossier →
CVE-2024-40489 CRITICAL
Component: jeecg_boot

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary ...

📅 2026-04-01
CVSS 9.8 Dossier →
CVE-2026-2945 MEDIUM
Component: jeecg_boot

A weakness has been identified in JeecgBoot 3.9.0. Affected by this vulnerability is an unknown functionality of the file /sys/common/uploadImgByHttp....

📅 2026-02-22
CVSS 6.3 Dossier →
CVE-2026-2822 MEDIUM
Component: jeecg_boot

A security vulnerability has been detected in JeecgBoot up to 3.9.1. The affected element is an unknown function of the file /jeecgboot/sys/dict/loadD...

📅 2026-02-20
CVSS 6.3 Dossier →
CVE-2026-2555 MEDIUM
Component: jeecg_boot

A weakness has been identified in JeecgBoot 3.9.1. This vulnerability affects the function importDocumentFromZip of the file org/jeecg/modules/airag/l...

📅 2026-02-16
CVSS 5.0 Dossier →
CVE-2026-2111 MEDIUM
Component: jeecg_boot

A weakness has been identified in JeecgBoot up to 3.9.0. Affected by this issue is some unknown functionality of the file /airag/knowledge/doc/edit of...

📅 2026-02-07
CVSS 4.3 Dossier →
CVE-2026-1746 MEDIUM
Component: jeecg_boot

A vulnerability was identified in JeecgBoot 3.9.0. This vulnerability affects unknown code of the file /JeecgBoot/sys/api/loadDictItemByKeyword of the...

📅 2026-02-02
CVSS 6.3 Dossier →
CVE-2025-66913 CRITICAL
Component: jimureport

JimuReport thru version 2.1.3 is vulnerable to remote code execution when processing user-controlled H2 JDBC URLs. The application passes the attacker...

📅 2026-01-08
CVSS 9.8 Dossier →
Component: jeecg_boot

A weakness has been identified in JeecgBoot up to 3.9.0. Affected by this vulnerability is the function getPositionUserList of the file /sys/position/...

📅 2025-12-28
CVSS 3.1 Dossier →
Component: jeecg_boot

A security flaw has been discovered in JeecgBoot up to 3.9.0. Affected is the function queryDepartPermission of the file /sys/permission/queryDepartPe...

📅 2025-12-28
CVSS 3.1 Dossier →
Component: jeecg_boot

A vulnerability was identified in JeecgBoot up to 3.9.0. This impacts the function getParameterMap of the file /sys/sysDepartPermission/list. The mani...

📅 2025-12-28
CVSS 3.1 Dossier →
Component: jeecg_boot

A vulnerability was determined in JeecgBoot up to 3.9.0. This affects an unknown function of the file /sys/sysDepartPermission/datarule/. Executing ma...

📅 2025-12-28
CVSS 3.1 Dossier →
Component: jeecg_boot

A vulnerability was found in JeecgBoot up to 3.9.0. The impacted element is the function loadDatarule of the file /sys/sysDepartRole/datarule/. Perfor...

📅 2025-12-28
CVSS 3.1 Dossier →
Component: jeecg_boot

A vulnerability has been found in JeecgBoot up to 3.9.0. The affected element is the function getDeptRoleByUserId of the file /sys/sysDepartRole/getDe...

📅 2025-12-28
CVSS 2.4 Dossier →
Component: jeecg_boot

A flaw has been found in JeecgBoot up to 3.9.0. Impacted is the function getDeptRoleList of the file /sys/sysDepartRole/getDeptRoleList. This manipula...

📅 2025-12-28
CVSS 3.1 Dossier →
Component: jeecg_boot

A vulnerability was detected in JeecgBoot up to 3.9.0. This issue affects the function queryPageList of the file /sys/sysDepartRole/list. The manipula...

📅 2025-12-28
CVSS 3.1 Dossier →
Component: jeecg_boot

A weakness has been identified in JeecgBoot up to 3.9.0. The impacted element is the function SysUserOnlineController of the file jeecg-boot/jeecg-mod...

📅 2025-12-19
CVSS 4.3 Dossier →
Component: jeecg_boot

A security flaw has been discovered in JeecgBoot up to 3.9.0. The affected element is an unknown function of the file jeecg-boot/jeecg-module-system/j...

📅 2025-12-19
CVSS 6.3 Dossier →
Component: jeecg_boot

Jeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability. The endpoint is /sys/comment/addFile. This vulnerability allows a...

📅 2025-10-01
CVSS 6.3 Dossier →
Component: jeecg_boot

Jeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability. This vulnerability allows attackers to upload files with system-w...

📅 2025-10-01
CVSS 6.3 Dossier →
Component: jeecg_boot

A vulnerability was detected in JeecgBoot up to 3.8.2. This impacts an unknown function of the file /sys/tenant/exportXls. Performing manipulation res...

📅 2025-09-26
CVSS 4.3 Dossier →
Component: jeecg_boot

A security vulnerability has been detected in JeecgBoot up to 3.8.2. This affects an unknown function of the file /sys/position/exportXls. Such manipu...

📅 2025-09-26
CVSS 4.3 Dossier →
Component: jeecg_boot

A weakness has been identified in JeecgBoot up to 3.8.2. The impacted element is an unknown function of the file /sys/role/exportXls. This manipulatio...

📅 2025-09-25
CVSS 4.3 Dossier →
Component: jeecg_boot

A security flaw has been discovered in JeecgBoot up to 3.8.2. The affected element is an unknown function of the file /sys/user/exportXls of the compo...

📅 2025-09-25
CVSS 4.3 Dossier →
Page 1 of 3 (72 Total Records)