Exrick xboot

• CVE-2026-111689 Medium 4.3 XBoot through 3.3.4 Authorization Bypass via getByDepartmentId Endpoint 0.3%
• CVE-2026-111688 Medium 4.3 Exrick XBoot through 3.3.4 Data-Scope Bypass via openDataFilter Parameter 0.3%
• CVE-2025-8528 Low 3.7 Exrick xboot getMenuList sensitive information in a cookie 0.4%
• CVE-2025-8527 Medium 6.3 Exrick xboot Swagger SecurityController.java server-side request forgery 0.4%
• CVE-2025-8526 Medium 6.3 Exrick xboot UploadController.java upload unrestricted upload 0.4%
• CVE-2025-8525 Medium 5.3 Exrick xboot Spring Boot Admin/Spring Actuator information disclosure 0.5%