Jinher records
12 published records for vendor jinher.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-610 Externally Controlled Reference to a Resource in Another Sphere8
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')3
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
12 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
23Monitor | CVE-2025-10090Proof of concept | Jinher OA GetTreeDate.aspx sql injectionjinher · jinher oa · CWE-74 | Medium5.5 | — | 1.8% | Sep 8, 2025 |
22Monitor | CVE-2025-7523No exploit | Jinher OA DelTemp.aspx xml external entity referencejinher · jinher oa · CWE-610 | Medium5.5 | — | 0.6% | Jul 13, 2025 |
22Monitor | CVE-2025-10091No exploit | Jinher OA XML Type xml external entity referencejinher · jinher oa · CWE-610 | Medium5.5 | — | 0.5% | Sep 8, 2025 |
22Monitor | CVE-2025-10092No exploit | Jinher OA XML Type xml external entity referencejinher · jinher oa · CWE-610 | Medium5.5 | — | 0.5% | Sep 8, 2025 |
22Monitor | CVE-2025-10816No exploit | Jinher OA XML text xml external entity referencejinher · jinher oa · CWE-610 | Medium5.5 | — | 0.5% | Sep 22, 2025 |
22Monitor | CVE-2025-11341No exploit | Jinher OA type xml external entity referencejinher · jinher oa · CWE-610 | Medium5.5 | — | 0.5% | Oct 6, 2025 |
22Monitor | CVE-2025-7824No exploit | Jinher OA XmlHttp.aspx xml external entity referencejinher · jinher oa · CWE-610 | Medium5.5 | — | 0.5% | Jul 19, 2025 |
22Monitor | CVE-2025-7823No exploit | Jinher OA ProjectScheduleDelete.aspx xml external entity referencejinher · jinher oa · CWE-610 | Medium5.5 | — | 0.5% | Jul 19, 2025 |
22Monitor | CVE-2025-9669No exploit | Jinher OA GetTreeDate.aspx sql injectionjinher · jinher oa · CWE-74 | Medium5.5 | — | 0.4% | Aug 29, 2025 |
21Monitor | CVE-2025-2587No exploit | Jinher OA C6 IncentivePlanFulfillAppprove.aspx sql injectionjinher · jinher oa c6 · CWE-74 | Medium5.3 | — | 0.4% | Mar 21, 2025 |
8Monitor | CVE-2025-11035No exploit | Jinher OA text xml external entity referencejinher · jinher oa · CWE-610 | Low2.1 | — | 0.4% | Sep 26, 2025 |
8Monitor | CVE-2025-9931No exploit | Jinher OA POST Request login!changePassWord.action cross site scriptingjinher · jinher oa · CWE-79 | Low2.1 | — | 0.4% | Sep 4, 2025 |
- CVE-2025-1009023Monitor
Jinher OA GetTreeDate.aspx sql injection
MediumCVSS 5.5Proof of conceptEPSS 2%jinher · jinher oaSep 8, 2025
- CVE-2025-752322Monitor
Jinher OA DelTemp.aspx xml external entity reference
MediumCVSS 5.5No exploitEPSS 1%jinher · jinher oaJul 13, 2025
- CVE-2025-1009122Monitor
Jinher OA XML Type xml external entity reference
MediumCVSS 5.5No exploitEPSS 1%jinher · jinher oaSep 8, 2025
- CVE-2025-1009222Monitor
Jinher OA XML Type xml external entity reference
MediumCVSS 5.5No exploitEPSS 1%jinher · jinher oaSep 8, 2025
- CVE-2025-1081622Monitor
Jinher OA XML text xml external entity reference
MediumCVSS 5.5No exploitEPSS 1%jinher · jinher oaSep 22, 2025
- CVE-2025-1134122Monitor
Jinher OA type xml external entity reference
MediumCVSS 5.5No exploitEPSS 1%jinher · jinher oaOct 6, 2025
- CVE-2025-782422Monitor
Jinher OA XmlHttp.aspx xml external entity reference
MediumCVSS 5.5No exploitEPSS 1%jinher · jinher oaJul 19, 2025
- CVE-2025-782322Monitor
Jinher OA ProjectScheduleDelete.aspx xml external entity reference
MediumCVSS 5.5No exploitEPSS 1%jinher · jinher oaJul 19, 2025
- CVE-2025-966922Monitor
Jinher OA GetTreeDate.aspx sql injection
MediumCVSS 5.5No exploitEPSS 0%jinher · jinher oaAug 29, 2025
- CVE-2025-258721Monitor
Jinher OA C6 IncentivePlanFulfillAppprove.aspx sql injection
MediumCVSS 5.3No exploitEPSS 0%jinher · jinher oa c6Mar 21, 2025
- CVE-2025-110358Monitor
Jinher OA text xml external entity reference
LowCVSS 2.1No exploitEPSS 0%jinher · jinher oaSep 26, 2025
- CVE-2025-99318Monitor
Jinher OA POST Request login!changePassWord.action cross site scripting
LowCVSS 2.1No exploitEPSS 0%jinher · jinher oaSep 4, 2025