How many y_project RuoYi CVEs are in CISA KEV?

None of y_project RuoYi's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of y_project RuoYi are affected?

36 distinct y_project RuoYi versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in y_project RuoYi CVEs?

y_project RuoYi's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-285 (Improper Authorization), CWE-400 (Uncontrolled Resource Consumption), CWE-502 (Deserialization of Untrusted Data).

How many critical y_project RuoYi vulnerabilities are there?

y_project RuoYi has 1 critical and 1 high-severity CVEs.

What is the average severity of y_project RuoYi CVEs?

The average CVSS base score across y_project RuoYi's scored CVEs is 6.0.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

y_project

9 CVEs

y_project RuoYi Vulnerabilities

Name: y_project RuoYi vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for RuoYi by y_project.

9

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

8

Public exploits

PoC or exploit code

6.0

Avg CVSS

2022–2025

Last updated December 18, 2025

Overview

y_project RuoYi has 9 published CVE records since 2022, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 8 have a known public exploit. The average CVSS base score across scored CVEs is 6.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting y_project RuoYi, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of y_project RuoYi's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High1

Medium6

Low1

In CISA’s Known Exploited Vulnerabilities catalog

0

None of y_project RuoYi's CVEs are currently listed in CISA's KEV catalog.

Public exploits

8

8 of y_project RuoYi's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every y_project RuoYi version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

4.7.04 CVEs
4.7.14 CVEs
4.7.24 CVEs
4.7.34 CVEs
4.7.44 CVEs
4.7.54 CVEs
4.7.64 CVEs
4.7.74 CVEs
4.7.82 CVEs
4.7.92 CVEs
4.01 CVE
4.11 CVE
4.21 CVE
4.31 CVE
4.41 CVE
4.51 CVE
4.61 CVE
4.71 CVE
4.701 CVE
4.711 CVE
4.721 CVE
4.731 CVE
4.741 CVE
4.751 CVE
4.761 CVE
4.771 CVE
4.781 CVE
4.791 CVE
4.81 CVE
4.8.01 CVE
4.8.11 CVE

Version ranges

>= 4.7.51 CVE
>= 4.7.81 CVE
>= 4.8.01 CVE
4.7.0 <= v <= 4.7.91 CVE

Fixed in

> 4.7.91 CVE

Find a version

9 CVEs

Sort

y_project RuoYi getnames code injection
CVE-2025-14856
Public exploit
CWE-74
Medium · CVSS 5.3
EPSS 0.4% (31th pct)2025-12-18
y_project RuoYi Offline Logout batchForceLogout improper authorization
CVE-2025-4819
Public exploit
CWE-285
Low · CVSS 2.3
EPSS 0.4% (31th pct)2025-05-17
y_project RuoYi Whitelist getBeanName deserialization
CVE-2025-0734
Public exploit
CWE-502
Medium · CVSS 5.1
EPSS 0.5% (40th pct)2025-01-27
y_project RuoYi Backend User Import SysUserServiceImpl.java SysUserServiceImpl cross site scripting
CVE-2024-9048
Public exploit
Patch
CWE-79
Medium · CVSS 6.3
EPSS 0.4% (31th pct)2024-09-21
Medium vulnerability · 2024-07-04
CVE-2024-6511
Public exploit
CWE-79
Medium · CVSS 5.3
EPSS 0.3% (27th pct)2024-07-04
y_project RuoYi HTTP POST Request login cross site scripting
CVE-2023-7133
Public exploit
CWE-79
Medium · CVSS 6.1
EPSS 0.7% (49th pct)2023-12-28
y_project RuoYi File Upload uploadFilesPath cross site scripting
CVE-2023-3815
Public exploit
CWE-79
Medium · CVSS 6.1
EPSS 0.6% (44th pct)2023-07-21
High vulnerability · 2023-06-08
CVE-2023-3163CWE-400
High · CVSS 7.5
EPSS 1.4% (69th pct)2023-06-08
Critical vulnerability · 2022-12-16
CVE-2022-4566
Public exploit
CWE-707
Critical · CVSS 9.8
EPSS 0.8% (53th pct)2022-12-16

Common weakness types

The CWE weakness categories most often found in y_project RuoYi CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many y_project RuoYi CVEs were published each year.

2022

1

2023

3

2024

2

2025

3

Other y_project products

Browse vulnerabilities for other products by y_project.

com.ruoyi:ruoyi6 CVEs com.ruoyi:ruoyi-common1 CVEs RuoYi-Cloud1 CVEs

All y_project vulnerabilities

Frequently asked questions

Common questions about y_project RuoYi vulnerabilities.

How many CVEs does y_project RuoYi have?: y_project RuoYi has 9 published CVE records since 2022.
How many y_project RuoYi CVEs are in CISA KEV?: None of y_project RuoYi's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for y_project RuoYi vulnerabilities?: Yes — 8 of y_project RuoYi's CVEs have a known public exploit.
Which versions of y_project RuoYi are affected?: 36 distinct y_project RuoYi versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in y_project RuoYi CVEs?: y_project RuoYi's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-285 (Improper Authorization), CWE-400 (Uncontrolled Resource Consumption), CWE-502 (Deserialization of Untrusted Data).
How many critical y_project RuoYi vulnerabilities are there?: y_project RuoYi has 1 critical and 1 high-severity CVEs.
What is the average severity of y_project RuoYi CVEs?: The average CVSS base score across y_project RuoYi's scored CVEs is 6.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track y_project RuoYi vulnerabilities

Monitor new y_project RuoYi vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing