Threats affecting pkg:maven/org.jeecg/jimureport

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 1.1%	CVE-2025-66913jimureport · Code Injection Critical9.8EPSS 1.1%2026-01-08CVE Database V5CVE-2025-66913 JimuReport thru version 2.1.3 is vulnerable to remote code execution when processing user-controlled H2 JDBC URLs. The application passes the attacker-supplied JDBC URL directly to the H2 driver, allowing the use of certain directives to execute arbitrary Java code. A different vulnerability than CVE-2025-10770. EPSS 1.1%Vulnerability CWE-94	CVE Database V5	2026-01-08

Page 1 of 1