Known Vulnerabilities for products from Xuxueli
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Xuxueli".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-7306 json | Not Provided | 2026-04-28 | 2026-04-28 | |
| CVE-2026-7305 json | Not Provided | 2026-04-28 | 2026-04-29 | |
| CVE-2026-7303 json | Not Provided | 2026-04-28 | 2026-04-29 | |
| CVE-2025-9264 json | A vulnerability was found in Xuxueli xxl-job up to 3.1.1. Affected by this issue is the function remove of the file /src/main... | Not Provided | 2025-08-21 | 2026-04-29 |
| CVE-2025-9263 json | A vulnerability has been found in Xuxueli xxl-job up to 3.1.1. Affected by this vulnerability is the function getJobsByGroup ... | Not Provided | 2025-08-20 | 2026-04-29 |
| CVE-2025-7789 json | A vulnerability was found in Xuxueli xxl-job up to 3.1.1 and classified as problematic. Affected by this issue is the functio... | Not Provided | 2025-07-18 | 2026-04-29 |
| CVE-2025-7788 json | A vulnerability has been found in Xuxueli xxl-job up to 3.1.1 and classified as critical. Affected by this vulnerability is t... | Not Provided | 2025-07-18 | 2026-04-29 |
| CVE-2025-7787 json | A vulnerability, which was classified as critical, was found in Xuxueli xxl-job up to 3.1.1. Affected is the function httpJob... | Not Provided | 2025-07-18 | 2026-04-29 |
| CVE-2025-6701 json | A vulnerability, which was classified as problematic, has been found in Xuxueli xxl-sso 1.1.0. This issue affects some unknow... | Not Provided | 2025-06-26 | 2026-04-29 |
| CVE-2025-6700 json | A vulnerability classified as problematic was found in Xuxueli xxl-sso 1.1.0. This vulnerability affects unknown code of the ... | Not Provided | 2025-06-26 | 2026-04-29 |
| CVE-2023-48089 json | 8.8 - HIGH | 2023-11-15 | 2023-11-21 | |
| CVE-2023-48088 json | 5.4 - MEDIUM | 2023-11-15 | 2023-11-21 | |
| CVE-2023-48087 json | 5.4 - MEDIUM | 2023-11-15 | 2023-11-21 | |
| CVE-2023-33779 json | A lateral privilege escalation vulnerability in XXL-Job v2.4.1 allows users to execute arbitrary commands on another user's a... | 8.8 - HIGH | 2023-05-26 | 2023-06-02 |
| CVE-2023-27087 json | Permissions vulnerabiltiy found in Xuxueli xxl-job v2.2.0, v 2.3.0 and v.2.3.1 allows attacker to obtain sensitive informatio... | 7.5 - HIGH | 2023-03-21 | 2023-03-24 |
| CVE-2023-26120 json | This affects all versions of the package com.xuxueli:xxl-job. HTML uploaded payload executed successfully through /xxl-job-ad... | 6.1 - MEDIUM | 2023-04-10 | 2023-11-07 |
| CVE-2023-0674 json | A vulnerability, which was classified as problematic, has been found in XXL-JOB 2.3.1. Affected by this issue is some unknown... | 6.5 - MEDIUM | 2023-02-04 | 2023-11-07 |
| CVE-2022-43183 json | XXL-Job before v2.3.1 contains a Server-Side Request Forgery (SSRF) via the component /admin/controller/JobLogController.java... | 8.8 - HIGH | 2022-11-17 | 2022-11-21 |
| CVE-2022-40929 json | XXL-JOB 2.2.0 has a Command execution vulnerability in background tasks. | 9.8 - CRITICAL | 2022-09-28 | 2023-08-08 |
| CVE-2022-36157 json | XXL-JOB all versions as of 11 July 2022 are vulnerable to Insecure Permissions resulting in the ability to execute admin func... | 8.8 - HIGH | 2022-08-19 | 2022-08-23 |