Vulnerabilidades em jeecgboot

113 resultados
Análise Vexday

JeecgBoot possui 10 vulnerabilidades catalogadas, com 3 publicadas nos últimos 90 dias, indicando descobertas recentes. Nenhuma está sob exploração ativa em campo (KEV) e não há críticas de severidade máxima, reduzindo o risco imediato. A fraqueza dominante é validação inadequada de entrada (CWE-20), padrão comum que merece atenção em processos de hardening.

CVE-2026-108635MEDIUMJeecgBoot through 3.9.5 Missing Authorization via getDepartmentHead EndpointEPSS 0.2%CVE-2026-108632MEDIUMJeecgBoot through 3.9.5 Missing Authorization via sysDepartPermission queryById EndpointEPSS 0.2%CVE-2026-108640MEDIUMJeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartRole/queryByIdEPSS 0.2%CVE-2026-108641MEDIUMJeecgBoot through 3.9.5 IDOR via /sys/sysAnnouncementSend/getOneEPSS 0.2%CVE-2026-108653MEDIUMJeecgBoot through 3.9.5 Missing Authorization via GET /openapi/listEPSS 0.2%CVE-2026-108614MEDIUMJeecgBoot through 3.9.5 Missing Authorization via /airag/extData/exportXlsEPSS 0.2%CVE-2026-108636MEDIUMJeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepart/appImportExcelEPSS 0.2%CVE-2026-108608MEDIUMJeecgBoot through 3.9.5 IDOR via deleteVoiceRecord userId ParameterEPSS 0.2%CVE-2026-108621MEDIUMJeecgBoot through 3.9.5 Missing Authorization via /sys/position/editEPSS 0.2%CVE-2026-108645MEDIUMJeecgBoot through 3.9.5 Missing Authorization via /sys/category/editEPSS 0.2%CVE-2026-108637MEDIUMJeecgBoot through 3.9.5 Missing Authorization via deleteUserGroupBatch EndpointEPSS 0.2%CVE-2026-108629MEDIUMJeecgBoot through 3.9.5 Missing Authorization via sysDepartPermission datarule EndpointEPSS 0.2%CVE-2026-108630MEDIUMJeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartPermission/editEPSS 0.2%CVE-2026-108652MEDIUMJeecgBoot through 3.9.5 Missing Authorization via /sys/api/updateAvatarEPSS 0.2%CVE-2026-108618MEDIUMJeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate Edit EndpointEPSS 0.2%CVE-2026-108607MEDIUMJeecgBoot through 3.9.5 IDOR via deleteVideoRecord userId ParameterEPSS 0.2%CVE-2026-108642MEDIUMJeecgBoot through 3.9.5 IDOR via PUT /sys/sysAnnouncementSend/editEPSS 0.2%CVE-2026-108638MEDIUMJeecgBoot through 3.9.5 Missing Authorization via /sys/user/deleteGroupUserEPSS 0.2%CVE-2026-108646MEDIUMJeecgBoot through 3.9.5 Missing Authorization via /sys/category/importExcelEPSS 0.2%CVE-2026-108617MEDIUMJeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate/add EndpointEPSS 0.2%