aEnrich
Security Scorecard
Score
36D
Total CVEs
2,501
Patch Rate
38%
959 patched
Avg Response
149d
days to patch
Critical Gaps
43
exploitable, no detection
Severity Breakdown
Critical215
High631
Medium1015
Low29
Patch Status
Patched959 (38%)
Partial/Workaround298 (12%)
Unpatched1244 (50%)
CVEs (2,726)
| CVE ID | Title | Severity | Score | Days | Patch |
|---|---|---|---|---|---|
| CVE-2025-54407 | GroupSession Cross-Site Scripting Vulnerability | Medium | 6.1 | - | Workaround |
| CVE-2025-57883 | aEnrich Auth Bypass | Medium | 6.1 | - | Workaround |
| CVE-2025-65120 | GroupSession Cross-Site Scripting Vulnerability | Medium | 6.1 | - | Workaround |
| CVE-2025-53523 | aEnrich Auth Bypass | Medium | 5.4 | - | Workaround |
| CVE-2025-62192 | SQL Injection in GroupSession Free Edition | Medium | 5.4 | - | Workaround |
| CVE-2025-66284 | GroupSession Cross-Site Scripting Vulnerability | Medium | 5.4 | - | Workaround |
| CVE-2025-14567 | haxxorsid Stock-Management-System Vulnerability | Medium | 5.3 | - | Workaround |
| CVE-2025-64781 | aEnrich HR Admin Token Forgery | Medium | 4.7 | - | Workaround |
| CVE-2025-67341 | jshERP Stored XSS Vulnerability | Medium | 4.6 | - | Patched |
| CVE-2025-67344 | aEnrich HR Admin Token Forgery | Medium | 4.6 | - | Patched |