Known Vulnerabilities for products from Xuxueli

Listed below are 20 of the newest known vulnerabilities associated with the vendor "Xuxueli".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2026-7306 json Not Provided 2026-04-28 2026-04-28
CVE-2026-7305 json Not Provided 2026-04-28 2026-04-28
CVE-2026-7303 json Not Provided 2026-04-28 2026-04-28
CVE-2026-3733 json Not Provided 2026-03-08 2026-03-11
CVE-2025-9264 json A vulnerability was found in Xuxueli xxl-job up to 3.1.1. Affected by this issue is the function remove of the file /src/main... Not Provided 2025-08-21 2026-04-29
CVE-2025-9263 json A vulnerability has been found in Xuxueli xxl-job up to 3.1.1. Affected by this vulnerability is the function getJobsByGroup ... Not Provided 2025-08-20 2026-04-29
CVE-2025-7789 json A vulnerability was found in Xuxueli xxl-job up to 3.1.1 and classified as problematic. Affected by this issue is the functio... Not Provided 2025-07-18 2026-04-29
CVE-2025-7788 json A vulnerability has been found in Xuxueli xxl-job up to 3.1.1 and classified as critical. Affected by this vulnerability is t... Not Provided 2025-07-18 2026-04-29
CVE-2025-7787 json A vulnerability, which was classified as critical, was found in Xuxueli xxl-job up to 3.1.1. Affected is the function httpJob... Not Provided 2025-07-18 2026-04-29
CVE-2025-6701 json A vulnerability, which was classified as problematic, has been found in Xuxueli xxl-sso 1.1.0. This issue affects some unknow... Not Provided 2025-06-26 2026-04-29
CVE-2025-6700 json A vulnerability classified as problematic was found in Xuxueli xxl-sso 1.1.0. This vulnerability affects unknown code of the ... Not Provided 2025-06-26 2026-04-29
CVE-2023-48089 json 8.8 - HIGH 2023-11-15 2023-11-21
CVE-2023-48088 json 5.4 - MEDIUM 2023-11-15 2023-11-21
CVE-2023-48087 json 5.4 - MEDIUM 2023-11-15 2023-11-21
CVE-2023-33779 json A lateral privilege escalation vulnerability in XXL-Job v2.4.1 allows users to execute arbitrary commands on another user's a... 8.8 - HIGH 2023-05-26 2023-06-02
CVE-2023-27087 json Permissions vulnerabiltiy found in Xuxueli xxl-job v2.2.0, v 2.3.0 and v.2.3.1 allows attacker to obtain sensitive informatio... 7.5 - HIGH 2023-03-21 2023-03-24
CVE-2023-26120 json This affects all versions of the package com.xuxueli:xxl-job. HTML uploaded payload executed successfully through /xxl-job-ad... 6.1 - MEDIUM 2023-04-10 2023-11-07
CVE-2023-0674 json A vulnerability, which was classified as problematic, has been found in XXL-JOB 2.3.1. Affected by this issue is some unknown... 6.5 - MEDIUM 2023-02-04 2023-11-07
CVE-2022-43183 json XXL-Job before v2.3.1 contains a Server-Side Request Forgery (SSRF) via the component /admin/controller/JobLogController.java... 8.8 - HIGH 2022-11-17 2022-11-21
CVE-2022-40929 json XXL-JOB 2.2.0 has a Command execution vulnerability in background tasks. 9.8 - CRITICAL 2022-09-28 2023-08-08

Known software with vulnerabilities from Xuxueli

Type Vendor Product Version
ApplicationXuxueliXxl-conf1.0.0
ApplicationXuxueliXxl-job1.0.0.0