jeecg has 10 CVEs on record. The busiest recent month was December 2025 with 10. The median CVSS is 3.1 (low). None have a confirmed exploitation report. The dominant weakness classes are CWE-266 (7) and CWE-285 (7).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 3.1
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Weakness classes
Products
- jeecg_boot 10
Worst active — by depth score
CVE-2025-14908Medium· 6.3A security flaw has been discovered in JeecgBoot up to 3.9.035CVE-2025-14909Medium· 4.3A weakness has been identified in JeecgBoot up to 3.9.024CVE-2025-15126Low· 3.1A weakness has been identified in JeecgBoot up to 3.9.017CVE-2025-15125Low· 3.1A security flaw has been discovered in JeecgBoot up to 3.9.017CVE-2025-15124Low· 3.1A vulnerability was identified in JeecgBoot up to 3.9.017
jeecg vulnerabilities
CVEs affecting jeecg, newest first. Open any entry for full detail, references, and exploit status.
10 CVEsRSS
CVE-2025-15126Low· 3.1A weakness has been identified in JeecgBoot up to 3.9.0
A weakness has been identified in JeecgBoot up to 3.9.0. Affected by this vulnerability is the function getPositionUserList of the file /sys/position/getPositionUserList. This manipulation of the argument positionId causes improper autho…
CVE-2025-15125Low· 3.1A security flaw has been discovered in JeecgBoot up to 3.9.0
A security flaw has been discovered in JeecgBoot up to 3.9.0. Affected is the function queryDepartPermission of the file /sys/permission/queryDepartPermission. The manipulation of the argument departId results in improper authorization. …
CVE-2025-15124Low· 3.1A vulnerability was identified in JeecgBoot up to 3.9.0
A vulnerability was identified in JeecgBoot up to 3.9.0. This impacts the function getParameterMap of the file /sys/sysDepartPermission/list. The manipulation of the argument departId leads to improper authorization. The attack can be in…
CVE-2025-15123Low· 3.1A vulnerability was determined in JeecgBoot up to 3.9.0
A vulnerability was determined in JeecgBoot up to 3.9.0. This affects an unknown function of the file /sys/sysDepartPermission/datarule/. Executing manipulation can lead to improper authorization. It is possible to launch the attack remo…
CVE-2025-15122Low· 3.1A vulnerability was found in JeecgBoot up to 3.9.0
A vulnerability was found in JeecgBoot up to 3.9.0. The impacted element is the function loadDatarule of the file /sys/sysDepartRole/datarule/. Performing manipulation of the argument departId/roleId results in improper authorization. It…
CVE-2025-15121Low· 2.4A vulnerability has been found in JeecgBoot up to 3.9.0
A vulnerability has been found in JeecgBoot up to 3.9.0. The affected element is the function getDeptRoleByUserId of the file /sys/sysDepartRole/getDeptRoleByUserId. Such manipulation of the argument departId leads to information disclos…
CVE-2025-15120Low· 3.1A flaw has been found in JeecgBoot up to 3.9.0
A flaw has been found in JeecgBoot up to 3.9.0. Impacted is the function getDeptRoleList of the file /sys/sysDepartRole/getDeptRoleList. This manipulation of the argument departId causes improper authorization. The attack is possible to …
CVE-2025-15119Low· 3.1A vulnerability was detected in JeecgBoot up to 3.9.0
A vulnerability was detected in JeecgBoot up to 3.9.0. This issue affects the function queryPageList of the file /sys/sysDepartRole/list. The manipulation of the argument deptId results in improper authorization. The attack can be execut…
CVE-2025-14909Medium· 4.3A weakness has been identified in JeecgBoot up to 3.9.0
A weakness has been identified in JeecgBoot up to 3.9.0. The impacted element is the function SysUserOnlineController of the file jeecg-boot/jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/system/controller/SysUserOn…
CVE-2025-14908Medium· 6.3A security flaw has been discovered in JeecgBoot up to 3.9.0
A security flaw has been discovered in JeecgBoot up to 3.9.0. The affected element is an unknown function of the file jeecg-boot/jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/system/controller/SysTenantController.j…