# JeecgBoot.

Every CVE that names JeecgBoot among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [JeecgBoot before 3.9.5 SQL Injection via SqlInjectionUtil Newline Bypass](https://agentprime.io/advisories/CVE-2026-112017.md)
  `CVE-2026-112017` · CVE record: jeecgboot JeecgBoot · CVSS 7.1 High · Not analysed yet · Published 18 Oct 2026 · Tags: SQL injection
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/user/getUserDetailByUserId](https://agentprime.io/advisories/CVE-2026-108891.md)
  `CVE-2026-108891` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartRole/exportXls](https://agentprime.io/advisories/CVE-2026-108888.md)
  `CVE-2026-108888` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/comment/exportXls](https://agentprime.io/advisories/CVE-2026-108887.md)
  `CVE-2026-108887` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/user/queryChildrenByUsername](https://agentprime.io/advisories/CVE-2026-108886.md)
  `CVE-2026-108886` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/message/sysMessage/delete](https://agentprime.io/advisories/CVE-2026-108885.md)
  `CVE-2026-108885` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate Delete Endpoint](https://agentprime.io/advisories/CVE-2026-108884.md)
  `CVE-2026-108884` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/thirdApp/editThirdAppConfig](https://agentprime.io/advisories/CVE-2026-108883.md)
  `CVE-2026-108883` · CVE record: jeecgboot JeecgBoot · CVSS 7.1 High · Not analysed yet · Published 11 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/position/removePositionUser](https://agentprime.io/advisories/CVE-2026-108882.md)
  `CVE-2026-108882` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/getTenantPackInfo](https://agentprime.io/advisories/CVE-2026-108881.md)
  `CVE-2026-108881` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/dict/editDictByLowAppId](https://agentprime.io/advisories/CVE-2026-108880.md)
  `CVE-2026-108880` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 IDOR via /airag/api/getChatVariable Username Parameter](https://agentprime.io/advisories/CVE-2026-108879.md)
  `CVE-2026-108879` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /airag/app/queryById](https://agentprime.io/advisories/CVE-2026-108878.md)
  `CVE-2026-108878` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/delete](https://agentprime.io/advisories/CVE-2026-108877.md)
  `CVE-2026-108877` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/user/putCancelQuit](https://agentprime.io/advisories/CVE-2026-108876.md)
  `CVE-2026-108876` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/user/addSysUserGroup](https://agentprime.io/advisories/CVE-2026-108875.md)
  `CVE-2026-108875` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/user/changeDepartChargePerson](https://agentprime.io/advisories/CVE-2026-108874.md)
  `CVE-2026-108874` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/user/doUpdateDepartInfo](https://agentprime.io/advisories/CVE-2026-108873.md)
  `CVE-2026-108873` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/user/batchEditUsers](https://agentprime.io/advisories/CVE-2026-108872.md)
  `CVE-2026-108872` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via POST /sys/sysDepartRole/datarule](https://agentprime.io/advisories/CVE-2026-108871.md)
  `CVE-2026-108871` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via POST /sys/role/datarule](https://agentprime.io/advisories/CVE-2026-108870.md)
  `CVE-2026-108870` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendSysAnnouncement](https://agentprime.io/advisories/CVE-2026-108869.md)
  `CVE-2026-108869` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendBusTemplateAnnouncement](https://agentprime.io/advisories/CVE-2026-108868.md)
  `CVE-2026-108868` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/api/getUserRoleSetById](https://agentprime.io/advisories/CVE-2026-108867.md)
  `CVE-2026-108867` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/api/queryUserAuths](https://agentprime.io/advisories/CVE-2026-108866.md)
  `CVE-2026-108866` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendTemplateAnnouncement](https://agentprime.io/advisories/CVE-2026-108680.md)
  `CVE-2026-108680` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendBusAnnouncement](https://agentprime.io/advisories/CVE-2026-108679.md)
  `CVE-2026-108679` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/api/queryUserRoles](https://agentprime.io/advisories/CVE-2026-108678.md)
  `CVE-2026-108678` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/api/getUserByName](https://agentprime.io/advisories/CVE-2026-108677.md)
  `CVE-2026-108677` · CVE record: jeecgboot JeecgBoot · CVSS 7.1 High · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/annountCement/downLoadFiles](https://agentprime.io/advisories/CVE-2026-108676.md)
  `CVE-2026-108676` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/annountCement/editIzTop](https://agentprime.io/advisories/CVE-2026-108675.md)
  `CVE-2026-108675` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /openapi/queryById](https://agentprime.io/advisories/CVE-2026-108674.md)
  `CVE-2026-108674` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/exportXls](https://agentprime.io/advisories/CVE-2026-108673.md)
  `CVE-2026-108673` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Authorization Bypass via /airag/video/listByUser](https://agentprime.io/advisories/CVE-2026-108672.md)
  `CVE-2026-108672` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /airag/airagMcp/queryById](https://agentprime.io/advisories/CVE-2026-108671.md)
  `CVE-2026-108671` · CVE record: jeecgboot JeecgBoot · CVSS 7.1 High · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/experiment](https://agentprime.io/advisories/CVE-2026-108670.md)
  `CVE-2026-108670` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /airag/knowledge/embedding/search](https://agentprime.io/advisories/CVE-2026-108669.md)
  `CVE-2026-108669` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/deleteRecycleBin](https://agentprime.io/advisories/CVE-2026-108668.md)
  `CVE-2026-108668` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/revertRecycleBin](https://agentprime.io/advisories/CVE-2026-108667.md)
  `CVE-2026-108667` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/deleteBatch](https://agentprime.io/advisories/CVE-2026-108666.md)
  `CVE-2026-108666` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/edit](https://agentprime.io/advisories/CVE-2026-108665.md)
  `CVE-2026-108665` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/queryById](https://agentprime.io/advisories/CVE-2026-108664.md)
  `CVE-2026-108664` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/deleteApply](https://agentprime.io/advisories/CVE-2026-108663.md)
  `CVE-2026-108663` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/deleteTenantPackUser](https://agentprime.io/advisories/CVE-2026-108662.md)
  `CVE-2026-108662` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/changeOwenUserTenant](https://agentprime.io/advisories/CVE-2026-108661.md)
  `CVE-2026-108661` · CVE record: jeecgboot JeecgBoot · CVSS 7.1 High · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/updateApplyStatus](https://agentprime.io/advisories/CVE-2026-108660.md)
  `CVE-2026-108660` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/listPackByTenantUserId](https://agentprime.io/advisories/CVE-2026-108659.md)
  `CVE-2026-108659` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/queryTenantAuthInfo](https://agentprime.io/advisories/CVE-2026-108658.md)
  `CVE-2026-108658` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/passApply](https://agentprime.io/advisories/CVE-2026-108657.md)
  `CVE-2026-108657` · CVE record: jeecgboot JeecgBoot · CVSS 8.6 High · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via getTenantPackApplyUsers Endpoint](https://agentprime.io/advisories/CVE-2026-108656.md)
  `CVE-2026-108656` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/quartzJob/queryById](https://agentprime.io/advisories/CVE-2026-108655.md)
  `CVE-2026-108655` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/oss/file/queryById](https://agentprime.io/advisories/CVE-2026-108654.md)
  `CVE-2026-108654` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via GET /openapi/list](https://agentprime.io/advisories/CVE-2026-108653.md)
  `CVE-2026-108653` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/api/updateAvatar](https://agentprime.io/advisories/CVE-2026-108652.md)
  `CVE-2026-108652` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/api/getRolesByUserId](https://agentprime.io/advisories/CVE-2026-108651.md)
  `CVE-2026-108651` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/api/getUserPermissionSet](https://agentprime.io/advisories/CVE-2026-108650.md)
  `CVE-2026-108650` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/api/queryUserRolesById](https://agentprime.io/advisories/CVE-2026-108649.md)
  `CVE-2026-108649` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via getDynamicDbSourceByCode Endpoint](https://agentprime.io/advisories/CVE-2026-108648.md)
  `CVE-2026-108648` · CVE record: jeecgboot JeecgBoot · CVSS 7.1 High · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/checkRule/importExcel](https://agentprime.io/advisories/CVE-2026-108647.md)
  `CVE-2026-108647` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/category/importExcel](https://agentprime.io/advisories/CVE-2026-108646.md)
  `CVE-2026-108646` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control

Older: <https://agentprime.io/advisories/technology/jeecgboot.md?cursor=WyIyMDI2LTEwLTEwVDIxOjQ5OjM2LjA1OTAwMFoiLCJDVkUtMjAyNi0xMDg2NDYiXQ>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=jeecgboot>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/jeecgboot/>. Everything for agents: <https://agentprime.io/llms.txt>.