aEnrich
Security Scorecard
Score
36D
Total CVEs
2,500
Patch Rate
38%
958 patched
Avg Response
149d
days to patch
Critical Gaps
43
exploitable, no detection
Severity Breakdown
Critical215
High631
Medium1014
Low29
Patch Status
Patched958 (38%)
Partial/Workaround298 (12%)
Unpatched1244 (50%)
CVEs (2,718)
| CVE ID | Title | Severity | Score | Days | Patch |
|---|---|---|---|---|---|
| CVE-2025-70310 | CVE-2025-70310 | Medium | 5.5 | - | Patched |
| CVE-2026-22265 | Roxy-WI Log Injection | High | 7.5 | - | Patched |
| CVE-2026-22867 | LaSuite XSS | High | 8.7 | - | Patched |
| CVE-2026-23493 | Pimcore Data & Experience Management Platform Vulnerability | High | 8.6 | - | Patched |
| CVE-2025-70305 | GPAC Stack Overflow Vulnerability | Medium | 5.5 | 0d | Unpatched |
| CVE-2026-23511 | Zitadel Identity Management Platform Remote User Enumeration Vulnerability | Medium | 5.3 | - | Patched |
| CVE-2026-23520 | Arcane Docker Management Vulnerability | Critical | 9.0 | - | Patched |
| CVE-2025-70890 | Cyber Cafe Management System XSS | Medium | 6.1 | - | Patched |
| CVE-2025-70891 | Phpgurukul Cyber Cafe Management System XSS | Medium | 6.1 | - | Patched |
| CVE-2025-70892 | aEnrich HR Admin Token Forgery | Critical | 9.8 | - | Workaround |