aEnrich a+HRD 5.x Learning Management Key Performance Indicator System has a local file inclusion (LFI) vulnerability that occurs due to missing input validation in v5.x

Published 2022-09-09 · Modified

8.1EPSS 0.011

CVE-2022-26675

aEnrich a+HRD - Path Traversal

Published 2022-04-07 · Modified

7.5EPSS 0.022

CVE-2022-39040

aEnrich a+HRD - Path Traversal

Published 2023-01-03 · Modified

7.5EPSS 0.019

CVE-2022-28740

aEnrich eHRD Learning Management Key Performance Indicator System 5+ exposes Sensitive Information to an Unauthorized Actor.

Published 2022-09-09 · Modified

7.5EPSS 0.008

CVE-2022-28742

aEnrich eHRD Learning Management Key Performance Indicator System 5+ has Improper Access Control. The web application does not validate user session when accessing many application pages. This can allow an attacker to gain unauthenticated access to sensitive functionalities in the application

Published 2022-09-09 · Modified

7.5EPSS 0.008

CVE-2024-3775

aEnrich Technology a+HRD - Argument Injection

Published 2024-04-15 · Analyzed

7.5EPSS 0.004

CVE-2025-0586

aEnrich Technology a+HRD - Insecure Deserialization

Published 2025-01-20 · Analyzed

7.2EPSS 0.007

CVE-2025-0583

aEnrich Technology a+HRD - Reflected Cross-site Scripting(XSS)