What’s Vulnerable › Products
Xuxueli xxl-job vulnerabilities
34 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 15 published in the last 12 months.
Check whether your Xuxueli xxl-job version is affected
Latest Xuxueli xxl-job vulnerabilities
- CVE-2026-94426 — xuxueli xxl-job insert cross site scripting (CVSS 3.5)
- CVE-2026-94145 — xuxueli xxl-job Task Management JobInfoController.java cross site scripting (CVSS 3.5)
- CVE-2026-90489 — Xuxueli xxl-job insert cross site scripting (CVSS 3.5)
- CVE-2026-90488 — Xuxueli xxl-job GlueFactory.java GroovyClassLoader.parseClass code injection (CVSS 6.3)
- CVE-2026-90487 — Xuxueli xxl-job JobGroupController.java privileges management (CVSS 4.3)
- CVE-2026-65316 — xxl-job Cross-Job-Group Log Disclosure via Missing Authorization Check in /joblog/logDetailCat (CVSS 6.5)
- CVE-2026-7306 — Xuxueli xxl-job OpenAPI Endpoint OpenApiController.java hard-coded key (CVSS 5.6)
- CVE-2026-7305 — Xuxueli xxl-job trigger Endpoint XxlJobServiceImpl.java triggerJob server-side request forgery (CVSS 6.3)
- CVE-2026-7303 — Xuxueli xxl-job Execution Log JobLogController.java logDetailCat resource injection (CVSS 3.7)
- CVE-2026-3733 — xuxueli xxl-job JobInfoController.java server-side request forgery (CVSS 6.3)
- CVE-2025-9264 — Xuxueli xxl-job Jobs JobInfoController.java remove resource injection (CVSS 5.4)
- CVE-2025-9263 — Xuxueli xxl-job JobLogController.java getJobsByGroup resource injection (CVSS 4.3)
- CVE-2025-7789 — Xuxueli xxl-job Token Generation IndexController.java makeToken weak password hash (CVSS 3.7)
- CVE-2025-7788 — Xuxueli xxl-job SampleXxlJob.java commandJobHandler os command injection (CVSS 8.8)
- CVE-2025-7787 — Xuxueli xxl-job SampleXxlJob.java httpJobHandler server-side request forgery (CVSS 8.8)
- CVE-2024-42681 — (CVSS 8.8)
- CVE-2024-3366 — Xuxueli xxl-job Template JdkSerializeTool.java deserialize injection (CVSS 9.8)
- CVE-2024-24113 — (CVSS 8.8)
- CVE-2023-48089 — (CVSS 8.8)
- CVE-2023-48088 — (CVSS 5.4)
- CVE-2023-48087 — (CVSS 5.4)
- CVE-2020-24922 — (CVSS 8.8)
- CVE-2023-33779 — (CVSS 8.8)
- CVE-2023-26120 — (CVSS 6.1)
- CVE-2023-27087 — (CVSS 7.5)