Vendor
Ruoyi
59 known vulnerabilities in products by Ruoyi, 0 of them actively exploited (CISA KEV).
Key figures
59
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
18
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2023-49371 | RuoYi: SQL Injection | 9.8 | |
| Critical | CVE-2021-38241 | RuoYi: Deserialization of Untrusted Data | 9.8 | |
| Critical | CVE-2024-57521 | RuoYi: SQL Injection | 10.0 | |
| Critical | CVE-2021-28411 | RuoYi: Privilege Escalation | 9.8 | |
| Critical | CVE-2025-28410 | RuoYi: Privilege Escalation | 9.8 | |
| Critical | CVE-2025-28402 | RuoYi: Privilege Escalation | 9.8 | |
| Critical | CVE-2025-28411 | RuoYi: Privilege Escalation | 9.8 | |
| Critical | CVE-2025-28412 | RuoYi: Privilege Escalation | 9.8 | |
| Critical | CVE-2025-28408 | RuoYi: Privilege Escalation | 9.8 | |
| Critical | CVE-2025-28413 | RuoYi: Privilege Escalation | 9.8 | |
| Critical | CVE-2025-28406 | RuoYi: Privilege Escalation | 9.8 | |
| Critical | CVE-2025-28405 | RuoYi: Privilege Escalation | 9.8 | |
| Critical | CVE-2022-48114 | RuoYi: SQL Injection | 9.8 | |
| High | CVE-2025-28409 | RuoYi: Privilege Escalation | 8.8 | |
| High | CVE-2025-28407 | RuoYi: Privilege Escalation | 8.8 | |
| Critical | CVE-2024-46076 | RuoYi: security vulnerability | 9.8 | |
| Critical | CVE-2025-70985 | RuoYi: Improper Access Control | 9.1 | |
| High | CVE-2024-57436 | RuoYi: security vulnerability | 7.2 | |
| High | CVE-2025-28403 | RuoYi: Privilege Escalation | 7.2 | |
| Medium | CVE-2025-7901 | yangzongzhuan RuoYi Swagger UI index.html cross site scripting | 4.3 | |
| High | CVE-2024-29400 | RuoYi: Information Disclosure | 7.5 | |
| High | CVE-2022-23868 | RuoYi: security vulnerability | 7.8 | |
| High | CVE-2025-70986 | RuoYi: Improper Access Control | 7.5 | |
| High | CVE-2025-56396 | RuoYi: Improper Access Control | 8.8 | |
| High | CVE-2023-3163 | y_project RuoYi filterKeyword resource consumption | 3.5 |
News
- ta458 roundpress exploitsproofpoint-threat-insight,
Products
| RuoYi | 57 | 0 |