Vulnerabilidades em jeecgboot

113 resultados
Análise Vexday

JeecgBoot possui 10 vulnerabilidades catalogadas, com 3 publicadas nos últimos 90 dias, indicando descobertas recentes. Nenhuma está sob exploração ativa em campo (KEV) e não há críticas de severidade máxima, reduzindo o risco imediato. A fraqueza dominante é validação inadequada de entrada (CWE-20), padrão comum que merece atenção em processos de hardening.

CVE-2026-108605MEDIUMJeecgBoot through 3.9.5 Missing Authorization via /airag/ocr/edit EndpointEPSS 0.2%CVE-2026-108625MEDIUMJeecgBoot through 3.9.5 Missing Authorization via sysMessage Edit EndpointEPSS 0.2%CVE-2026-108633MEDIUMJeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartPermission/addEPSS 0.2%CVE-2026-108610MEDIUMJeecgBoot through 3.9.5 Missing Authorization via /airag/word/edit EndpointEPSS 0.2%CVE-2026-108677HIGHJeecgBoot through 3.9.5 Missing Authorization via /sys/api/getUserByNameEPSS 0.2%CVE-2026-108628HIGHJeecgBoot through 3.9.5 Missing Authorization via saveDeptRolePermission EndpointEPSS 0.2%CVE-2026-108657HIGHJeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/passApplyEPSS 0.2%CVE-2026-108883HIGHJeecgBoot through 3.9.5 Missing Authorization via /sys/thirdApp/editThirdAppConfigEPSS 0.2%CVE-2026-108661HIGHJeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/changeOwenUserTenantEPSS 0.2%CVE-2026-108668MEDIUMJeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/deleteRecycleBinEPSS 0.2%CVE-2026-108882MEDIUMJeecgBoot through 3.9.5 Missing Authorization via /sys/position/removePositionUserEPSS 0.2%CVE-2026-108662MEDIUMJeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/deleteTenantPackUserEPSS 0.2%CVE-2026-108666MEDIUMJeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/deleteBatchEPSS 0.2%CVE-2026-108885MEDIUMJeecgBoot through 3.9.5 Missing Authorization via /sys/message/sysMessage/deleteEPSS 0.2%CVE-2026-108884MEDIUMJeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate Delete EndpointEPSS 0.2%CVE-2026-108877MEDIUMJeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/deleteEPSS 0.2%CVE-2026-108672MEDIUMJeecgBoot through 3.9.5 Authorization Bypass via /airag/video/listByUserEPSS 0.2%CVE-2026-108868MEDIUMJeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendBusTemplateAnnouncementEPSS 0.2%CVE-2026-108869MEDIUMJeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendSysAnnouncementEPSS 0.2%CVE-2026-108887MEDIUMJeecgBoot through 3.9.5 Missing Authorization via /sys/comment/exportXlsEPSS 0.2%