aEnrich
Security Scorecard
Score
35D
Total CVEs
2,475
Patch Rate
38%
940 patched
Avg Response
149d
days to patch
Critical Gaps
43
exploitable, no detection
Severity Breakdown
Critical211
High626
Medium998
Low29
Patch Status
Patched940 (38%)
Partial/Workaround293 (12%)
Unpatched1242 (50%)
CVEs (2,688)
| CVE ID | Title | Severity | Score | Days | Patch |
|---|---|---|---|---|---|
| CVE-2025-57156 | OWNTONE SERVER NULL POINTER DEREFERENCE | High | 7.5 | - | Patched |
| CVE-2025-66902 | Pithikos WebSocket Server Vulnerability | High | 7.5 | - | Patched |
| CVE-2025-15281 | aEnrich Auth Bypass | High | 7.5 | - | Workaround |
| CVE-2025-33015 | aEnrich HR Admin Token Forgery | High | 8.8 | - | Patched |
| CVE-2025-36115 | aEnrich Auth Bypass | Medium | 6.3 | - | Patched |
| CVE-2025-36396 | aEnrich HR Admin Token Forgery | Medium | 5.4 | - | Patched |
| CVE-2025-36397 | aEnrich HR Admin Token Forgery | Medium | 5.4 | - | Patched |
| CVE-2025-36408 | aEnrich HR Admin Token Forgery | Medium | 6.4 | - | Workaround |
| CVE-2025-36409 | aEnrich HR Admin Token Forgery | Medium | 5.4 | - | Workaround |
| CVE-2025-36419 | aEnrich HR Admin Token Forgery | Medium | 5.3 | - | Workaround |