Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

18 records

TI-2026-13056 CVE-2026-15517 · GHSA-g9x4-g2rg-r435

Jinher OA PlanGiveOut.aspx sql injection

Priority HIGH 70

A flaw has been found in Jinher OA 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00411 Published 2026-07-13 No fix listed CWE-74
TI-2026-09866 CVE-2026-11435 · GHSA-xhq4-92wj-h688

Jinher OA nextselectplan.aspx sql injection

Priority HIGH 70

A security vulnerability has been detected in Jinher OA 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00259 Published 2026-06-06 No fix listed CWE-74
TI-2026-09849 CVE-2026-11412 · GHSA-5422-5257-mh57

Jinher OA GetFormSn.aspx sql injection

Priority MEDIUM 57

A weakness has been identified in Jinher OA C6.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00196 Published 2026-06-06 No fix listed CWE-74
TI-2026-06752 CVE-2026-7670 · GHSA-vg39-86qf-m976

Jinher OA UserSel.aspx sql injection

Priority HIGH 70

A flaw has been found in Jinher OA 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00259 Published 2026-05-02 No fix listed CWE-74
TI-2025-10389 CVE-2025-11341 · GHSA-5v8c-888f-wwxg

Jinher OA type xml external entity reference

Priority MEDIUM 64

A security flaw has been discovered in Jinher OA up to 2.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0053 Published 2025-10-06 No fix listed CWE-610
TI-2025-10105 CVE-2025-11035 · GHSA-mmqw-r4v3-63q7

Jinher OA text xml external entity reference

Priority MEDIUM 57

A vulnerability was determined in Jinher OA 2.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00426 Published 2025-09-26 No fix listed CWE-610
TI-2025-09263 CVE-2025-10090 · GHSA-4q35-hvg6-q7wv

Jinher OA GetTreeDate.aspx sql injection

Priority HIGH 70

A flaw has been found in Jinher OA up to 1.2.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0193 Published 2025-09-08 No fix listed CWE-74
TI-2025-08860 CVE-2025-9669 · GHSA-2r45-v985-h9r5

Jinher OA GetTreeDate.aspx sql injection

Priority HIGH 70

A vulnerability has been found in Jinher OA 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00438 Published 2025-08-29 No fix listed CWE-74