Jeesite kayıtları
jeesite üreticisine ait 19 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %5,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')3
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-918 Server-Side Request Forgery (SSRF)2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-732 Incorrect Permission Assignment for Critical Resource1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
19 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2020-19229İstismar yok | Jeesite 1.2.7 uses the apache shiro version 1.2.3 affected by CVE-2016-4437.jeesite · jeesite · CWE-502 | Kritik9,8 | — | %1,4 | 5 Nis 2022 |
39İzleyin | CVE-2023-34601İstismar yok | Jeesite before commit 10742d3 was discovered to contain a SQL injection vulnerability via the component ${businessTable} at /act/ActDao.xml.jeesite · jeesite · CWE-89 | Kritik9,8 | — | %0,7 | 22 Haz 2023 |
27İzleyin | CVE-2024-8112İstismar yok | thinkgem JeeSite Cookie login cross site scriptingjeesite · jeesite · CWE-79 | Orta6,9 | — | %0,5 | 23 Ağu 2024 |
26İzleyin | CVE-2019-1010202İstismar yok | Jeesite 1.2.7 is affected by: XML External Entity (XXE).jeesite · jeesite · CWE-611 | Orta6,5 | — | %1,3 | 23 Tem 2019 |
26İzleyin | CVE-2019-1010201İstismar yok | Jeesite 1.2.7 is affected by: SQL Injection.jeesite · jeesite · CWE-89 | Orta6,5 | — | %1,2 | 23 Tem 2019 |
21İzleyin | CVE-2025-5186İstismar yok | thinkgem JeeSite URI Scheme form ResourceLoader.getResource server-side request forgeryjeesite · jeesite · CWE-918 | Orta5,3 | — | %0,5 | 26 May 2025 |
21İzleyin | CVE-2023-38991İstismar yok | An issue in the delete function in the ActModelController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete modeljeesite · jeesite · CWE-732 | Orta5,4 | — | %0,5 | 3 Ağu 2023 |
20İzleyin | CVE-2025-7863İstismar yok | thinkgem JeeSite ServletUtils.java redirectUrljeesite · jeesite · CWE-601 | Orta5,1 | — | %0,4 | 19 Tem 2025 |
17İzleyin | CVE-2023-38990İstismar yok | An issue in the delete function in the MenuController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete menus crejeesite · jeesite | Orta4,3 | — | %0,6 | 1 Ağu 2023 |
17İzleyin | CVE-2023-38988İstismar yok | An issue in the delete function in the OaNotifyController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete notifjeesite · jeesite | Orta4,3 | — | %0,5 | 28 Tem 2023 |
17İzleyin | CVE-2023-38989İstismar yok | An issue in the delete function in the UserController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete the Adminjeesite · jeesite · CWE-862 | Orta4,3 | — | %0,4 | 31 Tem 2023 |
8İzleyin | CVE-2025-7763İstismar yok | thinkgem JeeSite Site Controller SiteController.java select redirectjeesite · jeesite · CWE-601 | Düşük2,1 | — | %0,4 | 17 Tem 2025 |
8İzleyin | CVE-2025-7785İstismar yok | thinkgem JeeSite SsoController.java sso redirectjeesite · jeesite · CWE-601 | Düşük2,1 | — | %0,4 | 18 Tem 2025 |
8İzleyin | CVE-2025-9796İstismar yok | thinkgem JeeSite EncodeUtils.java decodeUrl2 cross site scriptingjeesite · jeesite · CWE-79 | Düşük2,0 | — | %0,4 | 1 Eyl 2025 |
8İzleyin | CVE-2025-7759İstismar yok | thinkgem JeeSite UEditor Image Grabber ActionEnter.java server-side request forgeryjeesite · jeesite · CWE-918 | Düşük2,1 | — | %0,3 | 17 Tem 2025 |
8İzleyin | CVE-2025-7865İstismar yok | thinkgem JeeSite XSS Filter EncodeUtils.java xssFilter cross site scriptingjeesite · jeesite · CWE-79 | Düşük2,0 | — | %0,3 | 20 Tem 2025 |
8İzleyin | CVE-2025-7864İstismar yok | thinkgem JeeSite FileUploadController.java upload unrestricted uploadjeesite · jeesite · CWE-284 | Düşük2,1 | — | %0,3 | 19 Tem 2025 |
5İzleyin | CVE-2026-3405İstismar yok | thinkgem JeeSite Connection path traversaljeesite · jeesite · CWE-22 | Düşük1,3 | — | %0,9 | 1 Mar 2026 |
5İzleyin | CVE-2026-3404İstismar yok | thinkgem JeeSite Endpoint CasOutHandler.java xml external entity referencejeesite · jeesite · CWE-610 | Düşük1,3 | — | %0,5 | 1 Mar 2026 |
- CVE-2020-1922939İzleyin
Jeesite 1.2.7 uses the apache shiro version 1.2.3 affected by CVE-2016-4437.
KritikCVSS 9,8İstismar yokEPSS %1jeesite · jeesite5 Nis 2022
- CVE-2023-3460139İzleyin
Jeesite before commit 10742d3 was discovered to contain a SQL injection vulnerability via the component ${businessTable} at /act/ActDao.xml.
KritikCVSS 9,8İstismar yokEPSS %1jeesite · jeesite22 Haz 2023
- CVE-2024-811227İzleyin
thinkgem JeeSite Cookie login cross site scripting
OrtaCVSS 6,9İstismar yokEPSS %0jeesite · jeesite23 Ağu 2024
- CVE-2019-101020226İzleyin
Jeesite 1.2.7 is affected by: XML External Entity (XXE).
OrtaCVSS 6,5İstismar yokEPSS %1jeesite · jeesite23 Tem 2019
- CVE-2019-101020126İzleyin
Jeesite 1.2.7 is affected by: SQL Injection.
OrtaCVSS 6,5İstismar yokEPSS %1jeesite · jeesite23 Tem 2019
- CVE-2025-518621İzleyin
thinkgem JeeSite URI Scheme form ResourceLoader.getResource server-side request forgery
OrtaCVSS 5,3İstismar yokEPSS %0jeesite · jeesite26 May 2025
- CVE-2023-3899121İzleyin
An issue in the delete function in the ActModelController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete model
OrtaCVSS 5,4İstismar yokEPSS %0jeesite · jeesite3 Ağu 2023
- CVE-2025-786320İzleyin
thinkgem JeeSite ServletUtils.java redirectUrl
OrtaCVSS 5,1İstismar yokEPSS %0jeesite · jeesite19 Tem 2025
- CVE-2023-3899017İzleyin
An issue in the delete function in the MenuController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete menus cre
OrtaCVSS 4,3İstismar yokEPSS %1jeesite · jeesite1 Ağu 2023
- CVE-2023-3898817İzleyin
An issue in the delete function in the OaNotifyController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete notif
OrtaCVSS 4,3İstismar yokEPSS %0jeesite · jeesite28 Tem 2023
- CVE-2023-3898917İzleyin
An issue in the delete function in the UserController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete the Admin
OrtaCVSS 4,3İstismar yokEPSS %0jeesite · jeesite31 Tem 2023
- CVE-2025-77638İzleyin
thinkgem JeeSite Site Controller SiteController.java select redirect
DüşükCVSS 2,1İstismar yokEPSS %0jeesite · jeesite17 Tem 2025
- CVE-2025-77858İzleyin
thinkgem JeeSite SsoController.java sso redirect
DüşükCVSS 2,1İstismar yokEPSS %0jeesite · jeesite18 Tem 2025
- CVE-2025-97968İzleyin
thinkgem JeeSite EncodeUtils.java decodeUrl2 cross site scripting
DüşükCVSS 2,0İstismar yokEPSS %0jeesite · jeesite1 Eyl 2025
- CVE-2025-77598İzleyin
thinkgem JeeSite UEditor Image Grabber ActionEnter.java server-side request forgery
DüşükCVSS 2,1İstismar yokEPSS %0jeesite · jeesite17 Tem 2025
- CVE-2025-78658İzleyin
thinkgem JeeSite XSS Filter EncodeUtils.java xssFilter cross site scripting
DüşükCVSS 2,0İstismar yokEPSS %0jeesite · jeesite20 Tem 2025
- CVE-2025-78648İzleyin
thinkgem JeeSite FileUploadController.java upload unrestricted upload
DüşükCVSS 2,1İstismar yokEPSS %0jeesite · jeesite19 Tem 2025
- CVE-2026-34055İzleyin
thinkgem JeeSite Connection path traversal
DüşükCVSS 1,3İstismar yokEPSS %1jeesite · jeesite1 Mar 2026
- CVE-2026-34045İzleyin
thinkgem JeeSite Endpoint CasOutHandler.java xml external entity reference
DüşükCVSS 1,3İstismar yokEPSS %1jeesite · jeesite1 Mar 2026