dromara
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 39 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 15, 2023 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Dromara free-fs 2.0.1 through 2.3.1 SQL Injection via orderBy Parameter
Dromara free-fs 2.0.1 through 2.3.1 Password Reset Code Brute-Force Account Takeover
Dromara free-fs 2.0.1 through 2.3.1 Missing Authentication via File Stream Preview
Dromara free-fs 2.0.1 through 2.3.1 Stored XSS via File Preview Endpoint
Dromara free-fs 2.0.1 through 2.3.1 Share Code and Permission Scope Bypass
domain-admin before 1.6.79 Missing Authorization via getGroupUserList
Jpom 2.10.0 through 2.11.12 Authentication Bypass via JPOM-USER-TOKEN Header
Jpom through 2.11.12 Cross-Workspace Authorization Bypass via SshFileController
Dromara Skyeye through commit 65d3ddcede70 SQL Injection via keyword Parameter
Dromara Skyeye Unauthenticated SSRF and File Overwrite via editUploadOfficeFileById
Monitor dromara in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.