Skip to content
OpenAdvisories

Vendor

aEnrich

21 known vulnerabilities.

Products

a+HRD 20 a+HCM 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.2
    CVE-2025-0586

    aEnrich Technology a+HRD - Insecure Deserialization

    The a+HRD from aEnrich Technology has an Insecure Deserialization vulnerability, allowing remote attackers with database modification privileges and regular system privileges to perform arbitrary code execution.

    aEnrich a+HRD
  • High 7.5
    CVE-2022-39040

    aEnrich a+HRD - Path Traversal

    aEnrich a+HRD log read function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files.

    aEnrich a+HRD
  • High 7.5
    CVE-2022-26675

    aEnrich a+HRD - Path Traversal

    aEnrich a+HRD has inadequate filtering for special characters in URLs. An unauthenticated remote attacker can bypass authentication and perform path traversal attacks to access arbitrary files under website root directory.

    aEnrich a+HRD