Skip to content
AaEnrich
Products
| Product | CVEs | Exploited | Latest |
| a+HRD | 14 | – | Apr 22, 2026 |
| a+HCM | 2 | – | Apr 22, 2026 |
Exploited and recent CVEs
-
CVE-2026-6835
Medium 6.1
aEnrich|a+HCM - Arbitrary File Upload
0.2%
-
CVE-2026-6834
Medium 6.5
aEnrich|a+HRD - Missing Authorization
0.3%
-
CVE-2026-6833
Medium 6.5
aEnrich|a+HRD - SQL Injection
0.3%
-
CVE-2025-12872
Medium 5.4
aEnrich|eHRD - Stored Cross-Site Scripting
0.2%
-
CVE-2025-12872
Medium 5.4
aEnrich|eHRD - Stored Cross-Site Scripting
0.2%
-
CVE-2025-12871
Critical 9.8
aEnrich|a+HRD - Authentication Abuse
0.6%
-
CVE-2025-12870
Critical 9.8
aEnrich|eHRD - Authentication Abuse
0.7%
-
CVE-2025-12869
Medium 4.8
aEnrich|eHRD - Stored Cross-Site Scripting
0.2%
-
CVE-2023-20853
Critical 9.8
aEnrich a+HRD - Deserialization of Untrusted Data
1.0%
-
CVE-2023-20852
Critical 9.8
aEnrich a+HRD - Deserialization of Untrusted Data
1.0%
-
CVE-2022-39039
Critical 9.8
aEnrich a+HRD - Server-Side Request Forgery (SSRF)
1.1%
-
CVE-2022-39041
Critical 9.8
aEnrich a+HRD - SQL Injection
1.3%
-
CVE-2022-39040
High 7.5
aEnrich a+HRD - Path Traversal
1.9%
-
CVE-2022-39042
Critical 9.8
aEnrich a+HRD - Improper Authentication
1.6%
-
CVE-2022-26676
Critical 9.8
aEnrich a+HRD - Broken Access Control
1.4%
-
CVE-2022-26675
High 7.5
aEnrich a+HRD - Path Traversal
2.2%