aEnrich
Security Scorecard
Score
36D
Total CVEs
2,501
Patch Rate
38%
959 patched
Avg Response
149d
days to patch
Critical Gaps
43
exploitable, no detection
Severity Breakdown
Critical215
High631
Medium1015
Low29
Patch Status
Patched959 (38%)
Partial/Workaround298 (12%)
Unpatched1244 (50%)
CVEs (2,730)
| CVE ID | Title | Severity | Score | Days | Patch |
|---|---|---|---|---|---|
| CVE-2025-62554 | aEnrich HR Admin Token Forgery | High | 8.4 | - | Workaround |
| CVE-2025-64671 | aEnrich Auth Bypass | High | 8.4 | - | Workaround |
| CVE-2025-66204 | WBCE CMS Brute-Force Protection Bypass | High | 8.1 | - | Patched |
| CVE-2025-67466 | Trinity Audio Plugin Broken Access Control Vulnerability | High | 8.1 | - | Patched |
| CVE-2025-65594 | OpenSIS Server Vulnerability | High | 8.1 | - | Patched |
| CVE-2025-66626 | Argo Workflows ZipSlip Vulnerability | High | 8.1 | - | Patched |
| CVE-2025-67495 | Zitadel DOM-Based XSS Vulnerability | High | 8.0 | - | Patched |
| CVE-2025-62552 | aEnrich Auth Bypass | High | 7.8 | - | Workaround |
| CVE-2025-62553 | aEnrich Auth Bypass | High | 7.8 | - | Workaround |
| CVE-2025-62562 | aEnrich Auth Bypass | High | 7.8 | - | Workaround |