dromara Exploited Vulnerabilities
Dromara vulnerabilities known to be exploited. Over the past 365 days, sorted by exploit discovery date.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Code Injection Vulnerability in Dromara Warm-Flow Product
CVE-2026-6125DromaraWarm-flow👾🟡5.3MEDIUMImproper Authorization in Dromara Lamp-Cloud Affects Remote User Management
CVE-2026-5529DromaraLamp-cloud👾🟡5.3MEDIUMRemote Code Injection Vulnerability in Dromara UJCMS Product
CVE-2026-2954DromaraUjcms👾🟡5.3MEDIUMPath Traversal Vulnerability in Dromara UJCMS 101.2
CVE-2026-2953DromaraUjcms👾🟡5.3MEDIUMDeserialization Vulnerability in Dromara Sa-Token by Dromara
CVE-2025-15222DromaraSa-token👾🟡2.3LOWInjection Vulnerability in Dromara DataCompare JDBC URL Handler of Dromara
CVE-2025-13268DromaraDatacompare👾🟡5.3MEDIUMPath Traversal Vulnerability in Dromara RuoYi-Vue-Plus Mail Handler
CVE-2025-6925DromaraRuoyi-vue-plus👾🟡6.9MEDIUMServer-Side Request Forgery in Dromara MaxKey Affects Meta URL Handler
CVE-2025-6517DromaraMaxkey👾🟡5.3MEDIUM