aEnrich records
20 published records for vendor aenrich.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 3
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-502 Deserialization of Untrusted Data3
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3
- CWE-918 Server-Side Request Forgery (SSRF)2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-1390 Weak Authentication2
The weakness classes this vendor ships most often: where to look.
CWEAll records
20 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2022-39042No exploit | aEnrich a+HRD - Improper Authenticationaenrich · a\+hrd · CWE-287 | Critical9.8 | — | 1.5% | Jan 2, 2023 |
39Monitor | CVE-2022-26676No exploit | aEnrich a+HRD - Broken Access Controlaenrich · a\+hrd · CWE-269 | Critical9.8 | — | 1.3% | Apr 7, 2022 |
39Monitor | CVE-2022-39041No exploit | aEnrich a+HRD - SQL Injectionaenrich · a\+hrd · CWE-89 | Critical9.8 | — | 1.3% | Jan 2, 2023 |
39Monitor | CVE-2022-39039No exploit | aEnrich a+HRD - Server-Side Request Forgery (SSRF)aenrich · a\+hrd · CWE-918 | Critical9.8 | — | 1.0% | Jan 2, 2023 |
39Monitor | CVE-2023-20853No exploit | aEnrich a+HRD - Deserialization of Untrusted Dataaenrich · a\+hrd · CWE-502 | Critical9.8 | — | 0.9% | Apr 26, 2023 |
39Monitor | CVE-2023-20852No exploit | aEnrich a+HRD - Deserialization of Untrusted Dataaenrich · a\+hrd · CWE-502 | Critical9.8 | — | 0.9% | Apr 26, 2023 |
39Monitor | CVE-2025-0585No exploit | aEnrich Technology a+HRD - SQL Injectionaenrich · a\+hrd · CWE-89 | Critical9.8 | — | 0.7% | Jan 19, 2025 |
37Monitor | CVE-2025-12870No exploit | aEnrich｜eHRD - Authentication Abuseaenrich · a+hrd · CWE-1390 | Critical9.3 | — | 0.6% | Nov 12, 2025 |
37Monitor | CVE-2025-12871No exploit | aEnrich｜a+HRD - Authentication Abuseaenrich · a+hrd · CWE-1390 | Critical9.3 | — | 0.6% | Nov 12, 2025 |
32Monitor | CVE-2022-28741No exploit | aEnrich a+HRD 5.x Learning Management Key Performance Indicator System has a local file inclusion (LFI) vulnerability that occurs due to misaenrich · a\+hrd · CWE-22 | High8.1 | — | 1.0% | Sep 9, 2022 |
31Monitor | CVE-2022-26675No exploit | aEnrich a+HRD - Path Traversalaenrich · a\+hrd · CWE-22 | High7.5 | — | 2.2% | Apr 7, 2022 |
31Monitor | CVE-2022-39040No exploit | aEnrich a+HRD - Path Traversalaenrich · a\+hrd · CWE-22 | High7.5 | — | 1.8% | Jan 2, 2023 |
30Monitor | CVE-2022-28740No exploit | aEnrich eHRD Learning Management Key Performance Indicator System 5+ exposes Sensitive Information to an Unauthorized Actor.aenrich · a\+hrd | High7.5 | — | 0.7% | Sep 9, 2022 |
30Monitor | CVE-2022-28742No exploit | aEnrich eHRD Learning Management Key Performance Indicator System 5+ has Improper Access Control.aenrich · a\+hrd | High7.5 | — | 0.7% | Sep 9, 2022 |
30Monitor | CVE-2024-3775No exploit | aEnrich Technology a+HRD - Argument Injectionaenrich · a\+hrd · CWE-88 | High7.5 | — | 0.4% | Apr 15, 2024 |
28Monitor | CVE-2025-0586No exploit | aEnrich Technology a+HRD - Insecure Deserializationaenrich · a\+hrd · CWE-502 | High7.2 | — | 0.7% | Jan 19, 2025 |
24Monitor | CVE-2025-0583No exploit | aEnrich Technology a+HRD - Reflected Cross-site Scripting(XSS)aenrich · a\+hrd · CWE-79 | Medium6.1 | — | 0.4% | Jan 19, 2025 |
21Monitor | CVE-2025-0584No exploit | aEnrich Technology a+HRD - Server-Side Request Forgery (SSRF)aenrich · a\+hrd · CWE-918 | Medium5.3 | — | 0.5% | Jan 19, 2025 |
21Monitor | CVE-2024-3774No exploit | aEnrich Technology a+HRD - Exposure of Sensitive Dataaenrich · a\+hrd · CWE-306 | Medium5.3 | — | 0.3% | Apr 14, 2024 |
19Monitor | CVE-2025-12869No exploit | aEnrich｜eHRD - Stored Cross-Site Scriptingaenrich · a+hrd · CWE-79 | Medium4.8 | — | 0.2% | Nov 12, 2025 |
- CVE-2022-3904239Monitor
aEnrich a+HRD - Improper Authentication
CriticalCVSS 9.8No exploitEPSS 1%aenrich · a\+hrdJan 2, 2023
- CVE-2022-2667639Monitor
aEnrich a+HRD - Broken Access Control
CriticalCVSS 9.8No exploitEPSS 1%aenrich · a\+hrdApr 7, 2022
- CVE-2022-3904139Monitor
aEnrich a+HRD - SQL Injection
CriticalCVSS 9.8No exploitEPSS 1%aenrich · a\+hrdJan 2, 2023
- CVE-2022-3903939Monitor
aEnrich a+HRD - Server-Side Request Forgery (SSRF)
CriticalCVSS 9.8No exploitEPSS 1%aenrich · a\+hrdJan 2, 2023
- CVE-2023-2085339Monitor
aEnrich a+HRD - Deserialization of Untrusted Data
CriticalCVSS 9.8No exploitEPSS 0%aenrich · a\+hrdApr 26, 2023
- CVE-2023-2085239Monitor
aEnrich a+HRD - Deserialization of Untrusted Data
CriticalCVSS 9.8No exploitEPSS 0%aenrich · a\+hrdApr 26, 2023
- CVE-2025-058539Monitor
aEnrich Technology a+HRD - SQL Injection
CriticalCVSS 9.8No exploitEPSS 0%aenrich · a\+hrdJan 19, 2025
- CVE-2025-1287037Monitor
aEnrich｜eHRD - Authentication Abuse
CriticalCVSS 9.3No exploitEPSS 0%aenrich · a+hrdNov 12, 2025
- CVE-2025-1287137Monitor
aEnrich｜a+HRD - Authentication Abuse
CriticalCVSS 9.3No exploitEPSS 0%aenrich · a+hrdNov 12, 2025
- CVE-2022-2874132Monitor
aEnrich a+HRD 5.x Learning Management Key Performance Indicator System has a local file inclusion (LFI) vulnerability that occurs due to mis
HighCVSS 8.1No exploitEPSS 1%aenrich · a\+hrdSep 9, 2022
- CVE-2022-2667531Monitor
aEnrich a+HRD - Path Traversal
HighCVSS 7.5No exploitEPSS 2%aenrich · a\+hrdApr 7, 2022
- CVE-2022-3904031Monitor
aEnrich a+HRD - Path Traversal
HighCVSS 7.5No exploitEPSS 1%aenrich · a\+hrdJan 2, 2023
- CVE-2022-2874030Monitor
aEnrich eHRD Learning Management Key Performance Indicator System 5+ exposes Sensitive Information to an Unauthorized Actor.
HighCVSS 7.5No exploitEPSS 0%aenrich · a\+hrdSep 9, 2022
- CVE-2022-2874230Monitor
aEnrich eHRD Learning Management Key Performance Indicator System 5+ has Improper Access Control.
HighCVSS 7.5No exploitEPSS 0%aenrich · a\+hrdSep 9, 2022
- CVE-2024-377530Monitor
aEnrich Technology a+HRD - Argument Injection
HighCVSS 7.5No exploitEPSS 0%aenrich · a\+hrdApr 15, 2024
- CVE-2025-058628Monitor
aEnrich Technology a+HRD - Insecure Deserialization
HighCVSS 7.2No exploitEPSS 0%aenrich · a\+hrdJan 19, 2025
- CVE-2025-058324Monitor
aEnrich Technology a+HRD - Reflected Cross-site Scripting(XSS)
MediumCVSS 6.1No exploitEPSS 0%aenrich · a\+hrdJan 19, 2025
- CVE-2025-058421Monitor
aEnrich Technology a+HRD - Server-Side Request Forgery (SSRF)
MediumCVSS 5.3No exploitEPSS 0%aenrich · a\+hrdJan 19, 2025
- CVE-2024-377421Monitor
aEnrich Technology a+HRD - Exposure of Sensitive Data
MediumCVSS 5.3No exploitEPSS 0%aenrich · a\+hrdApr 14, 2024
- CVE-2025-1286919Monitor
aEnrich｜eHRD - Stored Cross-Site Scripting
MediumCVSS 4.8No exploitEPSS 0%aenrich · a+hrdNov 12, 2025