aEnrich
Security Scorecard
Score
36D
Total CVEs
2,501
Patch Rate
38%
959 patched
Avg Response
149d
days to patch
Critical Gaps
43
exploitable, no detection
Severity Breakdown
Critical215
High631
Medium1015
Low29
Patch Status
Patched959 (38%)
Partial/Workaround298 (12%)
Unpatched1244 (50%)
CVEs (2,726)
| CVE ID | Title | Severity | Score | Days | Patch |
|---|---|---|---|---|---|
| CVE-2025-15257 | Edimax BR-6208AC Command Injection Vulnerability | High | 7.3 | - | Workaround |
| CVE-2025-15176 | Open5GS Session Establishment Request Handler Vulnerability | Medium | 5.3 | - | Patched |
| CVE-2024-30855 | DedeCMS v5.7 Cross-Site Request Forgery (CSRF) Vulnerability | High | 8.8 | - | Workaround |
| CVE-2025-52691 | aEnrich Auth Bypass | Critical | 10.0 | 4d | Unpatched |
| CVE-2025-15195 | Assessment Management SQL Injection | High | 7.3 | - | Workaround |
| CVE-2025-15197 | aEnrich HR Admin Token Forgery Vulnerability | Medium | 4.7 | 9d | Unpatched |
| CVE-2025-15207 | Campcodes Supplier Management System SQL Injection | High | 7.3 | 9d | Unpatched |
| CVE-2025-68706 | Kuwfi HTTP Daemon Stack-Based Buffer Overflow | Critical | 9.8 | - | Patched |
| CVE-2025-15148 | CmsEasy Template Injection Vulnerability | Medium | 4.7 | - | Patched |
| CVE-2025-15131 | ZSPACE Z4Pro+ Remote Command Injection Vulnerability | Medium | 6.3 | - | Patched |