Advisories · Technology

jeecgboot jimureport.

Every CVE that names jeecgboot jimureport among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-75479 CVE record

CVSS 8.7 High

JimuReport Unauthenticated Report Listing and Share Token Disclosure
- jeecgboot jimureport
- Authentication bypass
Not analysed yet 17 Aug 2026
CVE-2026-58375 CVE record

CVSS 8.7 High

JimuReport 2.5.0 - Unauthenticated Report Export via /jmreport/auto/export
- jeecgboot jimureport
- Authentication bypass
Not analysed yet 30 Jun 2026
CVE-2026-5848 CVE record

CVSS 5.1 Medium

jeecgboot JimuReport Data Source testConnection DriverManager.getConnection code injection
- jeecgboot JimuReport
- Other injection
- Code injection
Not analysed yet 9 Apr 2026
CVE-2025-10771 CVE record

CVSS 5.3 Medium

jeecgboot JimuReport DB2 JDBC testConnection deserialization
- jeecgboot JimuReport
- Insecure deserialization
- CWE-20
Not analysed yet 21 Sept 2025
CVE-2025-10770 CVE record

CVSS 5.3 Medium

jeecgboot JimuReport MySQL JDBC testConnection deserialization
- jeecgboot JimuReport
- Insecure deserialization
- CWE-20
Not analysed yet 21 Sept 2025
CVE-2025-8963 CVE record

CVSS 5.3 Medium

jeecgboot JimuReport Data Large Screen Template testConnection deserialization
- jeecgboot JimuReport
- Insecure deserialization
- CWE-20
Not analysed yet 14 Aug 2025
CVE-2023-6307 CVE record

CVSS 6.3 Medium

jeecgboot JimuReport image path traversal
- jeecgboot JimuReport
- Path traversal
Not analysed yet 27 Nov 2023
CVE-2023-4450 CVE record

CVSS 6.3 Medium

jeecgboot JimuReport Template injection
- jeecgboot JimuReport
- Other injection
Not analysed yet 21 Aug 2023