jeecg vendor intelligence

jeecg Known Exploited Vulnerabilities

Track evidence-backed exploitation affecting jeecg products, including the gap beyond CISA KEV, confidence assessments, sensor observations, and practical response context.

Browse jeecg KEVs Full KEV feed

Total KEVs: 4; Known exploited vulnerabilities affecting jeecg products
In CISA KEV: 0; Records also listed in the official catalog
Beyond CISA KEV: 4; Additional exploited CVEs absent from CISA KEV
Sensor Observed: 0; jeecg KEVs with sensor-observed exploitation activity

The catalog gap matters for jeecg exposure

Four of the four exploited jeecg CVEs tracked here are not in CISA KEV. Teams relying on the official catalog alone would miss 100% of this vendor portfolio.

0%
Covered by CISA: 100%
Beyond CISA: 3
Product families

Attested jeecg CVEs

Search the exploited-vulnerability portfolio, then narrow it to official CISA coverage or the additional records KEV Intelligence tracks beyond the catalog.

How exploitation is verified

CVE / description	Product	Confidence	CISA KEV	Added
CVE-2023-1454 jeecg-boot qurestSql sql injection	jeecg-boot	High	Beyond CISA	07 Jul 2025
CVE-2023-34659 jeecg-boot 3.5.0 and 3.5.1 have a SQL injection vulnerability the id parameter of the /jeecg-boot/jmreport/show interface.	jeecg-boot	High	Beyond CISA	07 Jul 2025
CVE-2023-4450 jeecgboot JimuReport Template injection	JimuReport	High	Beyond CISA	07 Jul 2025
CVE-2024-48307 JeecgBoot v3.7.1 was discovered to contain a SQL injection vulnerability via the component /onlDragDatasetHead/getTotalData.	JeecgBoot	High	Beyond CISA	26 Jun 2025

Showing 4 of 4 jeecg known exploited vulnerabilities.

Recurring weakness patterns

Neutralization and neutralization account for four mapped occurrences across this jeecg KEV portfolio.

Browse all KEVs →

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Early warning alerts

Get alerts on high-impact exploitation

Receive curator-selected alerts when exploitation activity warrants attention. Each alert includes the evidence and context needed to decide what requires attention now.