RuoYi vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

RU

Product

RuoYi

by yangzongzhuan · last CVE Sep 26, 2025

9

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities9 In the news0 Timeline

Severity mix

Critical 1High 1Medium 7Low 0

Severity

All severities9 Critical1 High1 Medium7 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add RuoYi to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-10473	9.8	0%	Sep 15	yangzongzhuan RuoYi Blacklist SqlUtil.java filterKeyword sql injection Affected: 4.8.0; 4.8.1
CVE-2025-10989	8.8	0%	Sep 26	yangzongzhuan RuoYi selectAll improper authorization Affected: 4.8.0; 4.8.1
CVE-2025-7901	6.1	1%	Jul 20	yangzongzhuan RuoYi Swagger UI index.html cross site scripting Affected: 4.8.0; 4.8.1
CVE-2025-10384	5.4	0%	Sep 13	yangzongzhuan RuoYi Role cancelAll improper authorization Affected: 4.8.0; 4.8.1
CVE-2025-8847	5.4	0%	Aug 11	yangzongzhuan RuoYi edit cross site scripting Affected: 4.8.0; 4.8.1
CVE-2025-7906	5.4	0%	Jul 20	yangzongzhuan RuoYi CommonController.java uploadFile unrestricted upload Affected: 4.8.0; 4.8.1
CVE-2025-7903	5.4	0%	Jul 20	yangzongzhuan RuoYi Image Source ui layer Affected: 4.8.0; 4.8.1
CVE-2025-7902	5.4	0%	Jul 20	yangzongzhuan RuoYi SysNoticeController.java addSave cross site scripting Affected: 4.8.0; 4.8.1
CVE-2025-7907	4.3	1%	Jul 20	yangzongzhuan RuoYi Druid application-druid.yml default credentials Affected: 4.8.0; 4.8.1