aEnrich
Security Scorecard
Score
36D
Total CVEs
2,507
Patch Rate
38%
963 patched
Avg Response
149d
days to patch
Critical Gaps
43
exploitable, no detection
Severity Breakdown
Critical215
High631
Medium1019
Low29
Patch Status
Patched963 (38%)
Partial/Workaround299 (12%)
Unpatched1245 (50%)
CVEs (2,736)
| CVE ID | Title | Severity | Score | Days | Patch |
|---|---|---|---|---|---|
| CVE-2025-65229 | Lyrion Music Server XSS | Medium | 4.6 | - | Patched |
| CVE-2025-12832 | aEnrich HR Admin Token Forgery | Medium | 4.6 | - | Patched |
| CVE-2025-64760 | Tuleap Tracker Trigger CSRF Vulnerability | Medium | 4.6 | - | Patched |
| CVE-2025-14220 | aEnrich HR Admin Token Forgery | Medium | 4.3 | - | Workaround |
| CVE-2025-65796 | usememos Memos v0.25.2 Reactions Arbitrary Deletion | Medium | 4.3 | - | Patched |
| CVE-2025-65799 | usememos memos v0.25.2 Attachment Service Path Traversal Vulnerability | Medium | 4.3 | - | Patched |
| CVE-2025-14191 | UTT 进取 512W Buffer Overflow Vulnerability | High | 8.8 | - | Patched |
| CVE-2025-14189 | Chanjet CRM Remote SQL Injection Exploit | High | 7.3 | 25d | Unpatched |
| CVE-2025-14192 | RashminDungrani Online Banking SQL Injection | High | 7.3 | - | Workaround |
| CVE-2025-14187 | UGREEN DH2100+ Buffer Overflow Vulnerability | High | 7.2 | - | Patched |