Jimureport (Jeecg) - vulnerabilities (CVEs)

9 CVEs, 0 in the last 30 days, 30 known versions, newest CVE from 2026-08-17. Vendor: Jeecg.

CVEs of Jimureport

• CVE-2026-75479 - CVSS 8.7 (high), 2026-08-17: JimuReport contains an authentication bypass vulnerability in the report folder template listing endpoint that allows unauthenticated attackers to enumerate…
• CVE-2026-58375 - CVSS 8.7 (high), 2026-06-30: JimuReport through 2.5.0 exposes the POST /jmreport/auto/export endpoint without authentication: the handler is annotated @JimuNoLoginRequired, so…
• CVE-2025-66913 - CVSS 9.8 (critical), 2026-01-08: JimuReport thru version 2.1.3 is vulnerable to remote code execution when processing user-controlled H2 JDBC URLs. The application passes the…
• CVE-2025-10771 - CVSS 9.8 (critical), 2025-09-21: A vulnerability was determined in jeecgboot JimuReport up to 2.1.2. Affected is an unknown function of the file /drag/onlDragDataSource/testConnection of the…
• CVE-2025-10770 - CVSS 6.5 (medium), 2025-09-21: A vulnerability was found in jeecgboot JimuReport up to 2.1.2. This impacts an unknown function of the file /drag/onlDragDataSource/testConnection of the…
• CVE-2025-8963 - CVSS 9.8 (critical), 2025-08-14: A vulnerability was determined in jeecgboot JimuReport up to 2.1.1. Affected by this issue is some unknown functionality of the file…
• CVE-2024-44893 - CVSS 9.8 (critical), 2024-09-10: An issue in the component /jeecg-boot/jmreport/dict/list of JimuReport v1.7.8 allows attacker to escalate privileges via a crafted GET request.
• CVE-2023-6307 - CVSS 9.8 (critical), 2023-11-27: A vulnerability classified as critical was found in jeecgboot JimuReport up to 1.6.1. Affected by this vulnerability is an unknown functionality of the file…
• CVE-2023-4450 - CVSS 9.8 (critical), 2023-08-21: A vulnerability was found in jeecgboot JimuReport up to 1.6.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of…