İçeriğe atla
Noroxi

jeecg kayıtları

jeecg üreticisine ait 72 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
7
Düzeltme kaydı olan
%13,9
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 21
  2. 22
  3. 23
  4. 24
  5. 25
  6. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

72 kayıt
  • CVE-2023-38992
    61Bu hafta

    jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData.

    KritikCVSS 9,8Kavram kanıtıEPSS %73

    jeecg · jeecg boot28 Tem 2023

  • CVE-2024-48307
    54Planlayın

    JeecgBoot v3.7.1 was discovered to contain a SQL injection vulnerability via the component /onlDragDatasetHead/getTotalData.

    KritikCVSS 9,8Kavram kanıtıEPSS %50

    jeecg · jeecg boot30 Eki 2024

  • CVE-2023-49442
    51Planlayın

    Deserialization of Untrusted Data in jeecgFormDemoController in JEECG 4.0 and earlier allows attackers to run arbitrary code via crafted POS

    KritikCVSS 9,8İstismar yokEPSS %38

    jeecg · jeecg3 Oca 2024

  • CVE-2023-1454
    50Planlayın

    jeecg-boot qurestSql sql injection

    KritikCVSS 9,8Kavram kanıtıEPSS %36

    jeecg · jeecg boot17 Mar 2023

  • CVE-2023-34659
    43Planlayın

    jeecg-boot 3.5.0 and 3.5.1 have a SQL injection vulnerability the id parameter of the /jeecg-boot/jmreport/show interface.

    KritikCVSS 9,8Kavram kanıtıEPSS %12

    jeecg · jeecg boot16 Haz 2023

  • CVE-2023-4450
    42Planlayın

    jeecgboot JimuReport Template injection

    KritikCVSS 9,8Kavram kanıtıEPSS %11

    jeecg · jimureport20 Ağu 2023

  • CVE-2023-41544
    40Planlayın

    SSTI injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to execute arbitrary code via crafted HTTP request to the

    KritikCVSS 9,8İstismar yokEPSS %2

    jeecg · jeecg boot30 Ara 2023

  • CVE-2020-28088
    40Planlayın

    An arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code.

    KritikCVSS 9,8İstismar yokEPSS %2

    jeecg · jeecg boot6 Ağu 2021

  • CVE-2023-40989
    40Planlayın

    SQL injection vulnerbility in jeecgboot jeecg-boot v 3.0, 3.5.3 that allows a remote attacker to execute arbitrary code via a crafted reques

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    jeecg · jeecg boot22 Eyl 2023

  • CVE-2021-46089
    40Planlayın

    In JeecgBoot 3.0, there is a SQL injection vulnerability that can operate the database with root privileges.

    KritikCVSS 9,8İstismar yokEPSS %1

    jeecg · jeecg boot25 Oca 2022

  • CVE-2024-43028
    39İzleyin

    A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code

    KritikCVSS 9,8İstismar yokEPSS %1

    jeecg · jeecg boot1 Nis 2026

  • CVE-2022-22881
    39İzleyin

    Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData.

    KritikCVSS 9,8İstismar yokEPSS %1

    jeecg · jeecg boot16 Şub 2022

  • CVE-2022-22880
    39İzleyin

    Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId.

    KritikCVSS 9,8İstismar yokEPSS %1

    jeecg · jeecg boot16 Şub 2022

  • CVE-2025-66913
    39İzleyin

    JimuReport thru version 2.1.3 is vulnerable to remote code execution when processing user-controlled H2 JDBC URLs.

    KritikCVSS 9,8İstismar yokEPSS %1

    jeecg · jimureport8 Oca 2026

  • CVE-2022-47105
    39İzleyin

    Jeecg-boot v3.4.4 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData.

    KritikCVSS 9,8İstismar yokEPSS %1

    jeecg · jeecg boot19 Oca 2023

  • CVE-2022-45207
    39İzleyin

    Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component updateNullByEmptyString.

    KritikCVSS 9,8İstismar yokEPSS %0

    jeecg · jeecg boot25 Kas 2022

  • CVE-2023-1784
    39İzleyin

    jeecg-boot API Documentation improper authentication

    KritikCVSS 9,8İstismar yokEPSS %0

    jeecg · jeecg boot31 Mar 2023

  • CVE-2023-41543
    39İzleyin

    SQL injection vulnerability in jeecg-boot v3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the co

    KritikCVSS 9,8İstismar yokEPSS %0

    jeecg · jeecg boot29 Ara 2023

  • CVE-2023-42268
    39İzleyin

    Jeecg boot up to v3.5.3 was discovered to contain a SQL injection vulnerability via the component /jeecg-boot/jmreport/show.

    KritikCVSS 9,8İstismar yokEPSS %0

    jeecg · jeecg boot8 Eyl 2023

  • CVE-2023-41542
    39İzleyin

    SQL injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via

    KritikCVSS 9,8İstismar yokEPSS %0

    jeecg · jeecg boot29 Ara 2023

  • CVE-2023-6307
    39İzleyin

    jeecgboot JimuReport image path traversal

    KritikCVSS 9,8İstismar yokEPSS %0

    jeecg · jimureport26 Kas 2023

  • CVE-2022-2647
    39İzleyin

    jeecg-boot unrestricted upload

    KritikCVSS 9,8İstismar yokEPSS %0

    jeecg · jeecg boot4 Ağu 2022

  • CVE-2023-1741
    39İzleyin

    jeecg-boot Sleep Command SysDictMapper.java sql injection

    KritikCVSS 9,8İstismar yokEPSS %0

    jeecg · jeecg boot30 Mar 2023

  • CVE-2022-45206
    39İzleyin

    Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/duplicate/check.

    KritikCVSS 9,8İstismar yokEPSS %0

    jeecg · jeecg boot25 Kas 2022

  • CVE-2024-40489
    39İzleyin

    There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute

    KritikCVSS 9,8İstismar yokEPSS %0

    jeecg · jeecg boot1 Nis 2026