Y
Vendor security profile
YunaiV
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs7
Critical0
CISA KEV0
Public exploit4
Patch rate%0
Avg. CVSS5.5
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
6
1
CVE KEV
CVE severity distribution
7toplam CVE
Medium7 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%57
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
7Unknown
Latest vulnerabilities
5.3
CVE-2026-110610
ruoyi-vue-pro through 2026.09 SSRF via Midjourney referImageUrl and notify imageUrl
Y
Patch status unknown
5.3
CVE-2026-97325
YunaiV/zhijiantianya ruoyi-vue-pro OAuth2 Client OAuth2ClientServiceImpl.java validOAuthClientFromCache redirect
Y
Patch status unknownEPSS %0
6.9
CVE-2026-97324
YunaiV/zhijiantianya ruoyi-vue-pro Demo-order Payment Callback PayDemoOrderController.java updateDemoOrderPaid improper authorization
Y
Patch status unknownEPSS %0
5.3
CVE-2026-97323
YunaiV/zhijiantianya ruoyi-vue-pro File Upload MpMaterialServiceImpl.java getOriginalFilename path traversal
Y
Patch status unknownEPSS %0
5.3
CVE-2026-97322
YunaiV/zhijiantianya ruoyi-vue-pro File Upload FileController.java cross site scripting
Y
Patch status unknownEPSS %0
5.3
CVE-2026-97321
YunaiV/zhijiantianya ruoyi-vue-pro GoView Data Endpoint GoViewDataServiceImpl.java GoViewDataServiceImpl.getDataBySQL sql injection
Y
Patch status unknownEPSS %0
5.3
CVE-2026-97320
YunaiV/zhijiantianya ruoyi-vue-pro AI Knowledge AiKnowledgeDocumentServiceImpl.java AiKnowledgeDocumentServiceImpl.readUrl server-side request forgery
Y
Patch status unknownEPSS %0