Skip to content
OpenAdvisories

Product · aEnrich

a+HCM

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-6835

    aEnrich｜a+HCM - Arbitrary File Upload

    The a+HCM developed by aEnrich has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload arbitrary files to any path, including HTML documents, which may result in a XSS-like effect.

    aEnrich a+HCM
  • Medium 5.4
    CVE-2025-12872

    aEnrich｜eHRD - Stored Cross-Site Scripting

    The a+HRD and a+HCM developed by aEnrich has a Stored Cross-Site Scripting vulnerability, allowing authenticated remote attackers to upload files containing malicious JavaScript code, which will execute on the client side when a user is tricked into visiting …

    aEnrich a+HRD a+HCM