CVE Tools
Track your stack

Jeesite

6 CVEs tracked since 2025. Since Jul 2025, none of them reached CISA KEV.

Jeesite CVEs per month

Jul 2025 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Jeesite CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2025-0760
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in Jeesite's monthly top three, with their CVEs summed over those months.

  1. Jeesite61 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Jeesite.

  1. CVE-2026-3405thinkgem JeeSite Connection path traversal3.1
  2. CVE-2026-3404thinkgem JeeSite Endpoint CasOutHandler.java xml external entity reference5.0
  3. CVE-2025-9796thinkgem JeeSite EncodeUtils.java decodeUrl2 cross site scripting3.5
  4. CVE-2025-7865thinkgem JeeSite XSS Filter EncodeUtils.java xssFilter cross site scripting3.5
  5. CVE-2025-7864thinkgem JeeSite FileUploadController.java upload unrestricted upload6.3
  6. CVE-2025-7863thinkgem JeeSite ServletUtils.java redirectUrl3.5
  7. CVE-2025-7785thinkgem JeeSite SsoController.java sso redirect4.3
  8. CVE-2025-7763thinkgem JeeSite Site Controller SiteController.java select redirect4.3
  9. CVE-2025-7759thinkgem JeeSite UEditor Image Grabber ActionEnter.java server-side request forgery6.3
  10. CVE-2025-5186thinkgem JeeSite URI Scheme form ResourceLoader.getResource server-side request forgery6.3
  11. CVE-2024-8112thinkgem JeeSite Cookie login cross site scripting4.3
  12. CVE-2023-38991An issue in the delete function in the ActModelController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete models created by the Administrator.5.4
  13. CVE-2023-38990An issue in the delete function in the MenuController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete menus created by the Administrator.4.3
  14. CVE-2023-38989An issue in the delete function in the UserController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete the Administrator's role information.4.3
  15. CVE-2023-38988An issue in the delete function in the OaNotifyController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete notifications created by Administrators.4.3

The record

Peak rank
#161 in Jul 2025
Busiest month shown
Jul 2025, 6 CVEs
Months with a KEV entry
0 since Jul 2025
Monthly snapshots
1 since 2025
Jeesite's full record, month by month