Vulnerabilities in thinkgem
12 resultsCVE-2026-3405LOWthinkgem JeeSite Connection path traversalEPSS 0.7%CVE-2025-5186MEDIUMthinkgem JeeSite URI Scheme form ResourceLoader.getResource server-side request forgeryEPSS 0.5%CVE-2025-7763MEDIUMthinkgem JeeSite Site Controller SiteController.java select redirectEPSS 0.5%CVE-2024-8112MEDIUMthinkgem JeeSite Cookie login cross site scriptingEPSS 0.5%CVE-2025-7785MEDIUMthinkgem JeeSite SsoController.java sso redirectEPSS 0.5%CVE-2025-7863MEDIUMthinkgem JeeSite ServletUtils.java redirectUrlEPSS 0.4%CVE-2026-3404LOWthinkgem JeeSite Endpoint CasOutHandler.java xml external entity referenceEPSS 0.4%CVE-2025-7759MEDIUMthinkgem JeeSite UEditor Image Grabber ActionEnter.java server-side request forgeryEPSS 0.4%CVE-2025-9796MEDIUMthinkgem JeeSite EncodeUtils.java decodeUrl2 cross site scriptingEPSS 0.4%CVE-2025-7865MEDIUMthinkgem JeeSite XSS Filter EncodeUtils.java xssFilter cross site scriptingEPSS 0.4%CVE-2025-7864MEDIUMthinkgem JeeSite FileUploadController.java upload unrestricted uploadEPSS 0.4%CVE-2026-119048LOWJeeSite 5.11.0 through 5.19.1 IDOR in AI CMS Chat ModuleEPSS 0.3%