Advisories · Technology

Jinher OA.

Every CVE that names Jinher OA among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-19905 CVE record

CVSS 6.9 Medium

Jinher OA attendance_out_approve.aspx sql injection
- Jinher OA
- Other injection
- SQL injection
Not analysed yet 15 Aug 2026
CVE-2026-15517 CVE record

CVSS 6.9 Medium

Jinher OA PlanGiveOut.aspx sql injection
- Jinher OA
- Other injection
- SQL injection
Not analysed yet 13 Jul 2026
CVE-2026-11435 CVE record

CVSS 6.9 Medium

Jinher OA nextselectplan.aspx sql injection
- Jinher OA
- Other injection
- SQL injection
Not analysed yet 6 Jun 2026
CVE-2026-11412 CVE record

CVSS 5.3 Medium

Jinher OA GetFormSn.aspx sql injection
- Jinher OA
- Other injection
- SQL injection
Not analysed yet 6 Jun 2026
CVE-2026-7670 CVE record

CVSS 6.9 Medium

Jinher OA UserSel.aspx sql injection
- Jinher OA
- Other injection
- SQL injection
Not analysed yet 2 May 2026
CVE-2025-11341 CVE record

CVSS 6.9 Medium

Jinher OA type xml external entity reference
- Jinher OA
- XML external entities (XXE)
- CWE-610
Not analysed yet 6 Oct 2025
CVE-2025-11035 CVE record

CVSS 5.3 Medium

Jinher OA text xml external entity reference
- Jinher OA
- XML external entities (XXE)
- CWE-610
Not analysed yet 26 Sept 2025
CVE-2025-10816 CVE record

CVSS 6.9 Medium

Jinher OA XML text xml external entity reference
- Jinher OA
- XML external entities (XXE)
- CWE-610
Not analysed yet 22 Sept 2025
CVE-2025-10092 CVE record

CVSS 6.9 Medium

Jinher OA XML Type xml external entity reference
- Jinher OA
- XML external entities (XXE)
- CWE-610
Not analysed yet 8 Sept 2025
CVE-2025-10091 CVE record

CVSS 6.9 Medium

Jinher OA XML Type xml external entity reference
- Jinher OA
- XML external entities (XXE)
- CWE-610
Not analysed yet 8 Sept 2025
CVE-2025-10090 CVE record

CVSS 6.9 Medium

Jinher OA GetTreeDate.aspx sql injection
- Jinher OA
- Other injection
- SQL injection
Not analysed yet 8 Sept 2025
CVE-2025-9931 CVE record

CVSS 5.3 Medium

Jinher OA POST Request login!changePassWord.action cross site scripting
- Jinher OA
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 3 Sept 2025
CVE-2025-9669 CVE record

CVSS 6.9 Medium

Jinher OA GetTreeDate.aspx sql injection
- Jinher OA
- Other injection
- SQL injection
Not analysed yet 29 Aug 2025
CVE-2025-7824 CVE record

CVSS 6.9 Medium

Jinher OA XmlHttp.aspx xml external entity reference
- Jinher OA
- XML external entities (XXE)
- CWE-610
Not analysed yet 19 Jul 2025
CVE-2025-7823 CVE record

CVSS 6.9 Medium

Jinher OA ProjectScheduleDelete.aspx xml external entity reference
- Jinher OA
- XML external entities (XXE)
- CWE-610
Not analysed yet 19 Jul 2025
CVE-2025-7523 CVE record

CVSS 6.9 Medium

Jinher OA DelTemp.aspx xml external entity reference
- Jinher OA
- XML external entities (XXE)
- CWE-610
Not analysed yet 13 Jul 2025