JhumanJ records
9 published records for vendor jhumanj.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-862 Missing Authorization2
- CWE-284 Improper Access Control1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-307 Improper Restriction of Excessive Authentication Attempts1
The weakness classes this vendor ships most often: where to look.
CWEAll records
9 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
11Monitor | CVE-2025-11441No exploit | JhumanJ OpnForm HTTP Header excessive authenticationjhumanj · opnform · CWE-307 | Low2.9 | — | 0.6% | Oct 8, 2025 |
11Monitor | CVE-2025-11443No exploit | JhumanJ OpnForm Forgotten Password email information exposurejhumanj · opnform · CWE-200 | Low2.9 | — | 0.5% | Oct 8, 2025 |
8Monitor | CVE-2025-11435No exploit | JhumanJ OpnForm submissions cross site scriptingjhumanj · opnform · CWE-79 | Low2.1 | — | 0.3% | Oct 8, 2025 |
8Monitor | CVE-2025-11436No exploit | JhumanJ OpnForm answer unrestricted uploadjhumanj · opnform · CWE-284 | Low2.1 | — | 0.3% | Oct 8, 2025 |
8Monitor | CVE-2025-11439No exploit | JhumanJ OpnForm integrations authorizationjhumanj · opnform · CWE-862 | Low2.1 | — | 0.3% | Oct 8, 2025 |
8Monitor | CVE-2025-11440No exploit | JhumanJ OpnForm edit access controljhumanj · opnform · CWE-266 | Low2.1 | — | 0.3% | Oct 8, 2025 |
8Monitor | CVE-2025-11438No exploit | JhumanJ OpnForm API Endpoint custom-domains authorizationjhumanj · opnform · CWE-862 | Low2.1 | — | 0.3% | Oct 8, 2025 |
8Monitor | CVE-2025-11442No exploit | JhumanJ OpnForm API Endpoint cross-site request forgeryjhumanj · opnform · CWE-352 | Low2.1 | — | 0.2% | Oct 8, 2025 |
7Monitor | CVE-2025-11437No exploit | JhumanJ OpnForm Form Editor forms cross site scriptingjhumanj · opnform · CWE-79 | Low1.9 | — | 0.2% | Oct 8, 2025 |
- CVE-2025-1144111Monitor
JhumanJ OpnForm HTTP Header excessive authentication
LowCVSS 2.9No exploitEPSS 0%jhumanj · opnformOct 8, 2025
- CVE-2025-1144311Monitor
JhumanJ OpnForm Forgotten Password email information exposure
LowCVSS 2.9No exploitEPSS 0%jhumanj · opnformOct 8, 2025
- CVE-2025-114358Monitor
JhumanJ OpnForm submissions cross site scripting
LowCVSS 2.1No exploitEPSS 0%jhumanj · opnformOct 8, 2025
- CVE-2025-114368Monitor
JhumanJ OpnForm answer unrestricted upload
LowCVSS 2.1No exploitEPSS 0%jhumanj · opnformOct 8, 2025
- CVE-2025-114398Monitor
JhumanJ OpnForm integrations authorization
LowCVSS 2.1No exploitEPSS 0%jhumanj · opnformOct 8, 2025
- CVE-2025-114408Monitor
JhumanJ OpnForm edit access control
LowCVSS 2.1No exploitEPSS 0%jhumanj · opnformOct 8, 2025
- CVE-2025-114388Monitor
JhumanJ OpnForm API Endpoint custom-domains authorization
LowCVSS 2.1No exploitEPSS 0%jhumanj · opnformOct 8, 2025
- CVE-2025-114428Monitor
JhumanJ OpnForm API Endpoint cross-site request forgery
LowCVSS 2.1No exploitEPSS 0%jhumanj · opnformOct 8, 2025
- CVE-2025-114377Monitor
JhumanJ OpnForm Form Editor forms cross site scripting
LowCVSS 1.9No exploitEPSS 0%jhumanj · opnformOct 8, 2025