Vulnerabilities in Jinher
17 resultsVexday analysis
Jinher registra 17 vulnerabilidades no Vexday, com 4 publicadas nos últimos 90 dias, indicando atividade recente de descoberta. Nenhuma das vulnerabilidades está sob ataque ativo (KEV) ou é classificada como crítica, reduzindo o risco imediato. A fraqueza dominante é CWE-610 (Inclusão de Funcionalidade de Módulo Externo Não Confiável), sugerindo deficiências no controle de integridade de componentes.
CVE-2025-10090MEDIUMJinher OA GetTreeDate.aspx sql injectionEPSS 1.8%CVE-2025-7523MEDIUMJinher OA DelTemp.aspx xml external entity referenceEPSS 0.6%CVE-2025-10092MEDIUMJinher OA XML Type xml external entity referenceEPSS 0.5%CVE-2025-10091MEDIUMJinher OA XML Type xml external entity referenceEPSS 0.5%CVE-2025-10816MEDIUMJinher OA XML text xml external entity referenceEPSS 0.5%CVE-2025-11341MEDIUMJinher OA type xml external entity referenceEPSS 0.5%CVE-2025-7824MEDIUMJinher OA XmlHttp.aspx xml external entity referenceEPSS 0.5%CVE-2025-7823MEDIUMJinher OA ProjectScheduleDelete.aspx xml external entity referenceEPSS 0.5%CVE-2025-9669MEDIUMJinher OA GetTreeDate.aspx sql injectionEPSS 0.4%CVE-2025-11035MEDIUMJinher OA text xml external entity referenceEPSS 0.4%CVE-2025-9931MEDIUMJinher OA POST Request login!changePassWord.action cross site scriptingEPSS 0.4%CVE-2025-2587MEDIUMJinher OA C6 IncentivePlanFulfillAppprove.aspx sql injectionEPSS 0.4%CVE-2026-11435MEDIUMJinher OA nextselectplan.aspx sql injectionEPSS 0.3%CVE-2026-7670MEDIUMJinher OA UserSel.aspx sql injectionEPSS 0.3%CVE-2026-15517MEDIUMJinher OA PlanGiveOut.aspx sql injectionEPSS 0.3%CVE-2026-11412MEDIUMJinher OA GetFormSn.aspx sql injectionEPSS 0.2%CVE-2026-2963MEDIUMJinher OA C6 OfficeSupplyTypeRight.aspx sql injectionEPSS 0.2%