jeecg_boot vulnerabilities
CVEs whose affected-version data names the jeecg_boot package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
10 CVEsRSS
CVE-2025-15126Low· 3.1A weakness has been identified in JeecgBoot up to 3.9.0
A weakness has been identified in JeecgBoot up to 3.9.0. Affected by this vulnerability is the function getPositionUserList of the file /sys/position/getPositionUserList. This manipulation of the argument positionId causes improper autho…
CVE-2025-15125Low· 3.1A security flaw has been discovered in JeecgBoot up to 3.9.0
A security flaw has been discovered in JeecgBoot up to 3.9.0. Affected is the function queryDepartPermission of the file /sys/permission/queryDepartPermission. The manipulation of the argument departId results in improper authorization. …
CVE-2025-15124Low· 3.1A vulnerability was identified in JeecgBoot up to 3.9.0
A vulnerability was identified in JeecgBoot up to 3.9.0. This impacts the function getParameterMap of the file /sys/sysDepartPermission/list. The manipulation of the argument departId leads to improper authorization. The attack can be in…
CVE-2025-15123Low· 3.1A vulnerability was determined in JeecgBoot up to 3.9.0
A vulnerability was determined in JeecgBoot up to 3.9.0. This affects an unknown function of the file /sys/sysDepartPermission/datarule/. Executing manipulation can lead to improper authorization. It is possible to launch the attack remo…
CVE-2025-15122Low· 3.1A vulnerability was found in JeecgBoot up to 3.9.0
A vulnerability was found in JeecgBoot up to 3.9.0. The impacted element is the function loadDatarule of the file /sys/sysDepartRole/datarule/. Performing manipulation of the argument departId/roleId results in improper authorization. It…
CVE-2025-15121Low· 2.4A vulnerability has been found in JeecgBoot up to 3.9.0
A vulnerability has been found in JeecgBoot up to 3.9.0. The affected element is the function getDeptRoleByUserId of the file /sys/sysDepartRole/getDeptRoleByUserId. Such manipulation of the argument departId leads to information disclos…
CVE-2025-15120Low· 3.1A flaw has been found in JeecgBoot up to 3.9.0
A flaw has been found in JeecgBoot up to 3.9.0. Impacted is the function getDeptRoleList of the file /sys/sysDepartRole/getDeptRoleList. This manipulation of the argument departId causes improper authorization. The attack is possible to …
CVE-2025-15119Low· 3.1A vulnerability was detected in JeecgBoot up to 3.9.0
A vulnerability was detected in JeecgBoot up to 3.9.0. This issue affects the function queryPageList of the file /sys/sysDepartRole/list. The manipulation of the argument deptId results in improper authorization. The attack can be execut…
CVE-2025-14909Medium· 4.3A weakness has been identified in JeecgBoot up to 3.9.0
A weakness has been identified in JeecgBoot up to 3.9.0. The impacted element is the function SysUserOnlineController of the file jeecg-boot/jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/system/controller/SysUserOn…
CVE-2025-14908Medium· 6.3A security flaw has been discovered in JeecgBoot up to 3.9.0
A security flaw has been discovered in JeecgBoot up to 3.9.0. The affected element is an unknown function of the file jeecg-boot/jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/system/controller/SysTenantController.j…