Ruoyi
C
CAUTION
23
Total CVEs
0
Crit / High
0
Medium
4%
Unpatched
0%
Patched
—
Avg CVSS
0
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB
How we collect data →
CVE Trend by Year
Patch Coverage
✓ 0 patched ✗ 1 unpatched ⏳ 23 pending score
Intelligence by Audience
PoC Available
16 / 20 shown
CISA KEV (Exploited)
0
Shodan Dorks
ssl:"ruoyi" port:443
org:"Ruoyi" http.status:200
Top EPSS (Exploitation Probability)
Quick Facts for Reporting
Total CVEs tracked
23
Critical severity
0
Actively exploited (CISA)
0
Unpatched ratio
4%
Avg CVSS score
—
Security grade
C (CAUTION)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-06-15
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-06-15
Security Risk Score (for investors)
LOW
Vuln Volume
GOOD
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
Security News Google News
No recent security news found for Ruoyi.
Recent CVEs
showing 20 of 24
| CVE ID | Severity | Patch | EPSS | Date |
|---|---|---|---|---|
| CVE-2025-70985 PoC | ? N/A | UNKNOWN / UNPATCHED | 0.02% | 2026-01-23 |
| CVE-2025-70986 PoC | ? N/A | UNKNOWN / UNPATCHED | 0.02% | 2026-01-23 |
| CVE-2025-66916 PoC | ? N/A | UNKNOWN / UNPATCHED | 0.08% | 2026-01-08 |
| CVE-2024-57521 PoC | ? N/A | UNKNOWN / UNPATCHED | 0.43% | 2025-12-23 |
| CVE-2025-67342 PoC | ? N/A | UNKNOWN / UNPATCHED | 0.02% | 2025-12-12 |
| CVE-2025-56396 | ? N/A | UNKNOWN / UNPATCHED | 0.06% | 2025-11-26 |
| CVE-2025-46174 PoC | ? N/A | UNKNOWN / UNPATCHED | 0.04% | 2025-11-26 |
| CVE-2025-46175 PoC | ? N/A | UNKNOWN / UNPATCHED | 0.04% | 2025-11-26 |
| CVE-2025-28408 PoC | ? N/A | UNKNOWN / UNPATCHED | 1.67% | 2025-04-07 |
| CVE-2025-28403 PoC | ? N/A | UNKNOWN / UNPATCHED | 1.28% | 2025-04-07 |
| CVE-2025-28407 PoC | ? N/A | UNKNOWN / UNPATCHED | 1.68% | 2025-04-07 |
| CVE-2025-28412 PoC | ? N/A | UNKNOWN / UNPATCHED | 1.67% | 2025-04-07 |
| CVE-2025-28410 PoC | ? N/A | UNKNOWN / UNPATCHED | 1.67% | 2025-04-07 |
| CVE-2024-57436 | ? N/A | UNKNOWN / UNPATCHED | 0.64% | 2025-01-29 |
| CVE-2024-57439 | ? N/A | UNKNOWN / UNPATCHED | 0.58% | 2025-01-29 |
| CVE-2024-57438 | ? N/A | UNKNOWN / UNPATCHED | 0.33% | 2025-01-29 |
| CVE-2024-57437 PoC | ? N/A | UNKNOWN / UNPATCHED | 0.21% | 2025-01-29 |
| CVE-2024-54762 PoC | ? N/A | UNKNOWN / UNPATCHED | 0.00% | 2025-01-09 |
| CVE-2024-46076 PoC | ? N/A | UNKNOWN / UNPATCHED | 0.40% | 2024-10-07 |
| CVE-2024-42900 PoC | ? N/A | UNKNOWN / UNPATCHED | 0.12% | 2024-08-28 |
Intel
CountryChina
LicenseOpen Source
Trust ScoreC — CAUTION
0 Last Updated2026-06-15
Top Weaknesses
CWE-79
Cross-Site Scripting (XSS)
4 occurrences in Ruoyi CVEs
(17% of total)
CWE-284
Improper Access Control
4 occurrences in Ruoyi CVEs
(17% of total)
CWE-89
SQL Injection
3 occurrences in Ruoyi CVEs
(13% of total)
CWE-862
Unknown Weakness Type
3 occurrences in Ruoyi CVEs
(13% of total)
CWE-269
Improper Privilege Management
3 occurrences in Ruoyi CVEs
(13% of total)
CWE-94
Code Injection
2 occurrences in Ruoyi CVEs
(9% of total)
CWE-200
Sensitive Information Exposure
2 occurrences in Ruoyi CVEs
(9% of total)
CWE-863
Incorrect Authorization
1 occurrence in Ruoyi CVEs
(4% of total)
Company Profile
Ruoyi is a Chinese software vendor known for developing the open-source Ruoyi framework, a popular rapid application development platform based on Spring Boot and Vue.js. The framework is widely used for building enterprise-level web applications, particularly in China, but its security relevance stems from the 22 CVEs tracked against it, which often involve vulnerabilities like SQL injection and cross-site scripting in its default configurations.
Response Metrics
Est. MTTR ⓘ
~500 days
(Critical)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ ↘ -79% better
CVE count 2026 vs 2025:
14 → 3 CVEs
Patch Speed ⓘ Poor (>65% open)
4% of CVEs still unpatched.
Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
Financial Risk Estimate
Est. GDPR Low
€600K
Est. GDPR High
€6.0M
Based on 0 critical CVEs, 0 CISA KEV, 100% unpatched. Model: GDPR Art.83 · not legal advice.
Actions
Embed Badge
Ruoyi C valtersit.com