Vulnerabilities > Aenrich
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-09-09 | CVE-2022-28740 | Unspecified vulnerability in Aenrich A+Hrd aEnrich eHRD Learning Management Key Performance Indicator System 5+ exposes Sensitive Information to an Unauthorized Actor. | 7.5 |
| 2022-09-09 | CVE-2022-28741 | Path Traversal vulnerability in Aenrich A+Hrd aEnrich a+HRD 5.x Learning Management Key Performance Indicator System has a local file inclusion (LFI) vulnerability that occurs due to missing input validation in v5.x | 8.1 |
| 2022-09-09 | CVE-2022-28742 | Unspecified vulnerability in Aenrich A+Hrd aEnrich eHRD Learning Management Key Performance Indicator System 5+ has Improper Access Control. | 7.5 |
| 2022-04-07 | CVE-2022-26675 | Path Traversal vulnerability in Aenrich A+Hrd 6.8 aEnrich a+HRD has inadequate filtering for special characters in URLs. | 7.5 |
| 2022-04-07 | CVE-2022-26676 | Incorrect Authorization vulnerability in Aenrich A+Hrd 6.8 aEnrich a+HRD has inadequate privilege restrictions, an unauthenticated remote attacker can use the API function to upload and execute malicious scripts to control the system or disrupt service. | 9.8 |