What’s Vulnerable › Products

Jinher OA vulnerabilities

16 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 16 published in the last 12 months.

Check whether your Jinher OA version is affected

Latest Jinher OA vulnerabilities

• CVE-2026-19905 — Jinher OA attendance_out_approve.aspx sql injection (CVSS 7.3)
• CVE-2026-15517 — Jinher OA PlanGiveOut.aspx sql injection (CVSS 7.3)
• CVE-2026-11435 — Jinher OA nextselectplan.aspx sql injection (CVSS 7.3)
• CVE-2026-11412 — Jinher OA GetFormSn.aspx sql injection (CVSS 6.3)
• CVE-2026-7670 — Jinher OA UserSel.aspx sql injection (CVSS 7.3)
• CVE-2025-11341 — Jinher OA type xml external entity reference (CVSS 9.8)
• CVE-2025-11035 — Jinher OA text xml external entity reference (CVSS 9.8)
• CVE-2025-10816 — Jinher OA XML text xml external entity reference (CVSS 9.8)
• CVE-2025-10092 — Jinher OA XML Type xml external entity reference (CVSS 9.8)
• CVE-2025-10091 — Jinher OA XML Type xml external entity reference (CVSS 9.8)
• CVE-2025-10090 — Jinher OA GetTreeDate.aspx sql injection (CVSS 9.8)
• CVE-2025-9931 — Jinher OA POST Request login!changePassWord.action cross site scripting (CVSS 6.1)
• CVE-2025-9669 — Jinher OA GetTreeDate.aspx sql injection (CVSS 9.8)
• CVE-2025-7824 — Jinher OA XmlHttp.aspx xml external entity reference (CVSS 9.8)
• CVE-2025-7823 — Jinher OA ProjectScheduleDelete.aspx xml external entity reference (CVSS 9.8)
• CVE-2025-7523 — Jinher OA DelTemp.aspx xml external entity reference (CVSS 9.8)