Jinher

Products

ProductCVEsExploitedLatest
OA16–Aug 15, 2026
OA C62–Feb 23, 2026

Exploited and recent CVEs

  • CVE-2026-19905 High 7.3 Jinher OA attendance_out_approve.aspx sql injection 0.4%
  • CVE-2026-15517 High 7.3 Jinher OA PlanGiveOut.aspx sql injection 0.4%
  • CVE-2026-11435 High 7.3 Jinher OA nextselectplan.aspx sql injection 0.3%
  • CVE-2026-11412 Medium 6.3 Jinher OA GetFormSn.aspx sql injection 0.2%
  • CVE-2026-7670 High 7.3 Jinher OA UserSel.aspx sql injection 0.3%
  • CVE-2026-2963 Medium 6.3 Jinher OA C6 OfficeSupplyTypeRight.aspx sql injection 0.2%
  • CVE-2025-11341 High 7.3 Jinher OA type xml external entity reference 0.5%
  • CVE-2025-11035 Medium 6.3 Jinher OA text xml external entity reference 0.4%
  • CVE-2025-10816 High 7.3 Jinher OA XML text xml external entity reference 0.6%
  • CVE-2025-10092 High 7.3 Jinher OA XML Type xml external entity reference 0.6%
  • CVE-2025-10091 High 7.3 Jinher OA XML Type xml external entity reference 0.6%
  • CVE-2025-10090 High 7.3 Jinher OA GetTreeDate.aspx sql injection 1.9%
  • CVE-2025-9931 Medium 4.3 Jinher OA POST Request login!changePassWord.action cross site scripting 0.4%
  • CVE-2025-9669 High 7.3 Jinher OA GetTreeDate.aspx sql injection 0.4%
  • CVE-2025-7824 High 7.3 Jinher OA XmlHttp.aspx xml external entity reference 0.6%
  • CVE-2025-7823 High 7.3 Jinher OA ProjectScheduleDelete.aspx xml external entity reference 0.6%
  • CVE-2025-7523 High 7.3 Jinher OA DelTemp.aspx xml external entity reference 0.7%
  • CVE-2025-2587 Medium 6.3 Jinher OA C6 IncentivePlanFulfillAppprove.aspx sql injection 0.4%