Exrick vulnerabilities
7 published CVEs name Exrick among the affected products.
- Published CVEs
- 7
- Last 12 months
- 3
- Critical
- 0
- Known exploited
- 0
Critical 0High 0Medium 7Low 0Not scored 0
CVEs per yearBy the year they were published
- 20254
- 20263
Newest CVEs
- CVE-2026-111689
XBoot through 3.3.4 Authorization Bypass via getByDepartmentId Endpoint
Exrick · xboot
Medium5.3 - CVE-2026-111688
Exrick XBoot through 3.3.4 Data-Scope Bypass via openDataFilter Parameter
Exrick · xboot
Medium5.3 - CVE-2026-90571
Exrick xmall Order Printing order-print.jsp cross site scripting
Exrick · xmall
Medium5.3 - CVE-2025-8528
Exrick xboot getMenuList sensitive information in a cookie
Exrick · xboot
Medium6.3 - CVE-2025-8527
Exrick xboot Swagger SecurityController.java server-side request forgery
Exrick · xboot
Medium5.3 - CVE-2025-8526
Exrick xboot UploadController.java upload unrestricted upload
Exrick · xboot
Medium5.3 - CVE-2025-8525
Exrick xboot Spring Boot Admin/Spring Actuator information disclosure
Exrick · xboot
Medium6.9
Products with the most CVEs
Most common weaknesses
- CWE-284 Improper access control2
- CWE-200 Exposure of sensitive information1
- CWE-312 Cleartext storage of sensitive information1
- CWE-315 1
- CWE-434 Unrestricted file upload1
- CWE-639 Authorization bypass through a user-controlled key (IDOR)1
- CWE-79 Cross-site scripting (XSS)1
- CWE-863 Incorrect authorization1
- CWE-918 Server-side request forgery (SSRF)1
- CWE-94 Code injection1