Vulnerabilities (CVE)

Filtered by vendor Jeecg Subscribe
Total 44 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-44585 1 Jeecg 1 Jeecg Boot 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
A Cross Site Scripting (XSS) vulnerabilitiy exits in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event.
CVE-2020-28088 1 Jeecg 1 Jeecg Boot 2024-11-21 7.5 HIGH 9.8 CRITICAL
An arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code.
CVE-2020-28087 1 Jeecg 1 Jeecg Boot 2024-11-21 5.0 MEDIUM 7.5 HIGH
A SQL injection vulnerability in /jeecg boot/sys/dict/loadtreedata of jeecg-boot CMS 2.3 allows attackers to access sensitive database information.
CVE-2020-20948 1 Jeecg 1 Jeecg 2024-11-21 5.0 MEDIUM 7.5 HIGH
An arbitrary file download vulnerability in jeecg v3.8 allows attackers to access sensitive files via modification of the "localPath" variable.