Thinkgem
6 CVEs tracked since 2025. Since Jul 2025, none of them reached CISA KEV.
Thinkgem CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2025-07 | 6 | 0 |
| 2025-08 | 4 or fewer | |
| 2025-09 | 4 or fewer | |
| 2025-10 | 4 or fewer | |
| 2025-11 | 4 or fewer | |
| 2025-12 | 5 or fewer | |
| 2026-01 | 5 or fewer | |
| 2026-02 | 5 or fewer | |
| 2026-03 | 7 or fewer | |
| 2026-04 | 6 or fewer | |
| 2026-05 | 7 or fewer | |
| 2026-06 | 7 or fewer | |
| 2026-07 | 7 or fewer | |
| 2026-08 | 8 or fewer | |
| 2026-09 | 9 or fewer | |
| 2026-10 | 6 or fewer |
Products
The products that kept showing up in Thinkgem's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 11 most recently published vulnerabilities affecting Thinkgem.
- CVE-2026-3405thinkgem JeeSite Connection path traversal3.1
- CVE-2026-3404thinkgem JeeSite Endpoint CasOutHandler.java xml external entity reference5.0
- CVE-2025-9796thinkgem JeeSite EncodeUtils.java decodeUrl2 cross site scripting3.5
- CVE-2025-7865thinkgem JeeSite XSS Filter EncodeUtils.java xssFilter cross site scripting3.5
- CVE-2025-7864thinkgem JeeSite FileUploadController.java upload unrestricted upload6.3
- CVE-2025-7863thinkgem JeeSite ServletUtils.java redirectUrl3.5
- CVE-2025-7785thinkgem JeeSite SsoController.java sso redirect4.3
- CVE-2025-7763thinkgem JeeSite Site Controller SiteController.java select redirect4.3
- CVE-2025-7759thinkgem JeeSite UEditor Image Grabber ActionEnter.java server-side request forgery6.3
- CVE-2025-5186thinkgem JeeSite URI Scheme form ResourceLoader.getResource server-side request forgery6.3
- CVE-2024-8112thinkgem JeeSite Cookie login cross site scripting4.3
The record
- Peak rank
- #166 in Jul 2025
- Busiest month shown
- Jul 2025, 6 CVEs
- Months with a KEV entry
- 0 since Jul 2025
- Monthly snapshots
- 1 since 2025