Y Project

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 4
    Known Exploited: 0
    1
    Critical Level Threats
    0
    High Level Threats
    1
    Medium Level Threats
    2
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2025-70985

    Incorrect access control in the update function of RuoYi v4.8.2 allows unauthorized attackers to arbitrarily modify data outside of their scope.

    Last Modified: Jan 30, 2026
    Published: Jan 23, 2026

    CVE-2025-14856

    y_project RuoYi getnames code injection

    Last Modified: Feb 24, 2026
    Published: Dec 18, 2025

    CVE-2025-4819

    y_project RuoYi Offline Logout batchForceLogout improper authorization

    Last Modified: Oct 10, 2025
    Published: May 17, 2025

    CVE-2024-9048

    y_project RuoYi Backend User Import SysUserServiceImpl.java SysUserServiceImpl cross site scripting

    Last Modified: Sep 30, 2024
    Published: Sep 21, 2024
    Items Per Page