How many JeecgBoot jimureport CVEs are in CISA KEV?

None of JeecgBoot jimureport's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of JeecgBoot jimureport are affected?

50 distinct JeecgBoot jimureport versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in JeecgBoot jimureport CVEs?

JeecgBoot jimureport's CVEs most often map to these CWE weakness types: CWE-502 (Deserialization of Untrusted Data), CWE-94 (Improper Control of Generation of Code ('Code Injection')), CWE-23 (Relative Path Traversal), CWE-269 (Improper Privilege Management).

How many critical JeecgBoot jimureport vulnerabilities are there?

JeecgBoot jimureport has 4 critical and 1 high-severity CVEs.

What is the average severity of JeecgBoot jimureport CVEs?

The average CVSS base score across JeecgBoot jimureport's scored CVEs is 7.7.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

JeecgBoot

9 CVEs

JeecgBoot jimureport Vulnerabilities

Name: JeecgBoot jimureport vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for jimureport by JeecgBoot.

9

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

7

Public exploits

PoC or exploit code

7.7

Avg CVSS

2023–2026

Last updated June 30, 2026

Overview

JeecgBoot jimureport has 9 published CVE records since 2023, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 7 have a known public exploit. The average CVSS base score across scored CVEs is 7.7.

This page aggregates every publicly disclosed vulnerability (CVE) affecting JeecgBoot jimureport, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of JeecgBoot jimureport's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical4

High1

Medium4

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of JeecgBoot jimureport's CVEs are currently listed in CISA's KEV catalog.

Public exploits

7

7 of JeecgBoot jimureport's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every JeecgBoot jimureport version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

1.5.68 CVEs
1.5.98 CVEs
1.6.08 CVEs
1.6.17 CVEs
1.6.26 CVEs
1.6.2-GA56 CVEs
1.6.46 CVEs
1.6.56 CVEs
1.6.66 CVEs
1.7.06 CVEs
1.7.26 CVEs
1.7.46 CVEs
1.7.526 CVEs
1.7.86 CVEs
2.0.06 CVEs
2.1.06 CVEs
2.1.16 CVEs
1.8.05 CVEs
1.8.15 CVEs
1.9.15 CVEs
1.9.35 CVEs
2.1.25 CVEs
2.1.33 CVEs
2.1.52 CVEs
2.2.02 CVEs
2.3.02 CVEs
1.01 CVE
1.11 CVE
1.21 CVE
1.31 CVE
1.41 CVE
1.51 CVE
1.61 CVE
2.01 CVE
2.11 CVE
2.21 CVE
2.3.21 CVE
2.3.41 CVE

Version ranges

<= 2.1.22 CVEs
< 1.6.11 CVE
<= 1.6.11 CVE
<= 2.1.11 CVE
<= 2.1.31 CVE
<= 2.5.01 CVE
>= 1.7.81 CVE
1.7.8 <= v <= 1.7.81 CVE

Fixed in

> 2.5.01 CVE
1.6.11 CVE
7a9f88e953e85e934a95c519a2683563d60637371 CVE
bd6837fb5036e6540edb516f8f8ff63c481014b31 CVE

Find a version

9 CVEs

Sort

JimuReport 2.5.0 - Unauthenticated Report Export via /jmreport/auto/export
CVE-2026-58375
Public exploit
Patch
CWE-306
High · CVSS 8.7
EPSS 0.5% (37th pct)2026-06-30
jeecgboot JimuReport Data Source testConnection DriverManager.getConnection code injection
CVE-2026-5848
Public exploit
CWE-94
Medium · CVSS 5.1
EPSS 0.3% (23th pct)2026-04-09
Critical vulnerability · 2026-01-08
CVE-2025-66913
Public exploit
CWE-94
Critical · CVSS 9.8
EPSS 0.9% (57th pct)2026-01-08
jeecgboot JimuReport DB2 JDBC testConnection deserialization
CVE-2025-10771
Public exploit
CWE-502
Medium · CVSS 5.3
EPSS 0.6% (43th pct)2025-09-21
jeecgboot JimuReport MySQL JDBC testConnection deserialization
CVE-2025-10770
Public exploit
CWE-502
Medium · CVSS 5.3
EPSS 0.4% (32th pct)2025-09-21
jeecgboot JimuReport Data Large Screen Template testConnection deserialization
CVE-2025-8963CWE-502
Medium · CVSS 5.3
EPSS 0.5% (38th pct)2025-08-14
Critical vulnerability · 2024-09-10
CVE-2024-44893CWE-269
Critical · CVSS 9.8
EPSS 0.5% (42th pct)2024-09-10
Critical vulnerability · 2023-11-27
CVE-2023-6307
Public exploit
CWE-23
Critical · CVSS 9.8
EPSS 0.8% (54th pct)2023-11-27
Critical vulnerability · 2023-08-21
CVE-2023-4450
Public exploit
Patch
CWE-74
Critical · CVSS 9.8
EPSS 11.4% (96th pct)2023-08-21

Common weakness types

The CWE weakness categories most often found in JeecgBoot jimureport CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many JeecgBoot jimureport CVEs were published each year.

2023

2

2024

1

2025

3

2026

3

Other JeecgBoot products

Browse vulnerabilities for other products by JeecgBoot.

jeecg boot57 CVEs jeecg-boot54 CVEs jeecgboot42 CVEs org.jeecgframework.boot:jeecg-boot-parent11 CVEs org.jeecgframework.boot:jeecg-boot-common7 CVEs jeecg6 CVEs org.jeecgframework.boot:jeecg-boot-base5 CVEs org.jeecgframework.boot:jeecg-module-system5 CVEs

All JeecgBoot vulnerabilities

Frequently asked questions

Common questions about JeecgBoot jimureport vulnerabilities.

How many CVEs does JeecgBoot jimureport have?: JeecgBoot jimureport has 9 published CVE records since 2023.
How many JeecgBoot jimureport CVEs are in CISA KEV?: None of JeecgBoot jimureport's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for JeecgBoot jimureport vulnerabilities?: Yes — 7 of JeecgBoot jimureport's CVEs have a known public exploit.
Which versions of JeecgBoot jimureport are affected?: 50 distinct JeecgBoot jimureport versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in JeecgBoot jimureport CVEs?: JeecgBoot jimureport's CVEs most often map to these CWE weakness types: CWE-502 (Deserialization of Untrusted Data), CWE-94 (Improper Control of Generation of Code ('Code Injection')), CWE-23 (Relative Path Traversal), CWE-269 (Improper Privilege Management).
How many critical JeecgBoot jimureport vulnerabilities are there?: JeecgBoot jimureport has 4 critical and 1 high-severity CVEs.
What is the average severity of JeecgBoot jimureport CVEs?: The average CVSS base score across JeecgBoot jimureport's scored CVEs is 7.7.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track JeecgBoot jimureport vulnerabilities

Monitor new JeecgBoot jimureport vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing