Vulnerabilidades em jeecgboot

113 resultados
Análise Vexday

JeecgBoot possui 10 vulnerabilidades catalogadas, com 3 publicadas nos últimos 90 dias, indicando descobertas recentes. Nenhuma está sob exploração ativa em campo (KEV) e não há críticas de severidade máxima, reduzindo o risco imediato. A fraqueza dominante é validação inadequada de entrada (CWE-20), padrão comum que merece atenção em processos de hardening.

CVE-2026-108680MEDIUMJeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendTemplateAnnouncementEPSS 0.2%CVE-2026-108663MEDIUMJeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/deleteApplyEPSS 0.2%CVE-2026-108660MEDIUMJeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/updateApplyStatusEPSS 0.2%CVE-2026-108873MEDIUMJeecgBoot through 3.9.5 Missing Authorization via /sys/user/doUpdateDepartInfoEPSS 0.2%CVE-2026-108667MEDIUMJeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/revertRecycleBinEPSS 0.2%CVE-2026-108665MEDIUMJeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/editEPSS 0.2%CVE-2026-108875MEDIUMJeecgBoot through 3.9.5 Missing Authorization via /sys/user/addSysUserGroupEPSS 0.2%CVE-2026-108876MEDIUMJeecgBoot through 3.9.5 Missing Authorization via /sys/user/putCancelQuitEPSS 0.2%CVE-2026-108670MEDIUMJeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/experimentEPSS 0.2%CVE-2026-108679MEDIUMJeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendBusAnnouncementEPSS 0.2%CVE-2026-108675MEDIUMJeecgBoot through 3.9.5 Missing Authorization via /sys/annountCement/editIzTopEPSS 0.2%CVE-2026-108870MEDIUMJeecgBoot through 3.9.5 Missing Authorization via POST /sys/role/dataruleEPSS 0.2%CVE-2026-108871MEDIUMJeecgBoot through 3.9.5 Missing Authorization via POST /sys/sysDepartRole/dataruleEPSS 0.2%