TH
Vendor
thinkgem
10
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-119048 New | JE JeeSite thinkgem | 4.2 | Oct 29 | JeeSite 5.11.0 through 5.19.1 IDOR in AI CMS Chat Module |
| CVE-2025-9796 | JE JeeSite thinkgem | 4.1 | Sep 1 | thinkgem JeeSite EncodeUtils.java decodeUrl2 cross site scripting |
| CVE-2025-7865 | JE JeeSite thinkgem | 5.4 | Jul 20 | thinkgem JeeSite XSS Filter EncodeUtils.java xssFilter cross site scripting |
| CVE-2025-7864 | JE JeeSite thinkgem | 5.4 | Jul 20 | thinkgem JeeSite FileUploadController.java upload unrestricted upload |
| CVE-2025-7863 | JE JeeSite thinkgem | 3.5 | Jul 20 | thinkgem JeeSite ServletUtils.java redirectUrl |
| CVE-2025-7785 | JE JeeSite thinkgem | 4.3 | Jul 18 | thinkgem JeeSite SsoController.java sso redirect |
| CVE-2025-7763 | JE JeeSite thinkgem | 4.3 | Jul 17 | thinkgem JeeSite Site Controller SiteController.java select redirect |
| CVE-2025-7759 | JE JeeSite thinkgem | 8.8 | Jul 17 | thinkgem JeeSite UEditor Image Grabber ActionEnter.java server-side request forgery |
| CVE-2025-5186 | JE JeeSite thinkgem | 8.8 | May 26 | thinkgem JeeSite URI Scheme form ResourceLoader.getResource server-side request forgery |
| CVE-2024-8112 | JE JeeSite thinkgem | 6.1 | Aug 23 | thinkgem JeeSite Cookie login cross site scripting |