F
Vendor security profile
Forma
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs1
Critical0
CISA KEV0
Public exploit1
Patch rate%0
Avg. CVSS5.3
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
1
0
CVE KEV
CVE severity distribution
1toplam CVE
Medium1 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%100
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
1Unknown
Latest vulnerabilities
8.8
CVE-2026-12613
Insecure Deserialization Leading to Remote Code Execution in Ministry of Justice's UYAP Document Editor
MO
Patch status unknownEPSS %0
7.8
CVE-2026-18390
Command Injection in Ministry of Justice's UYAP Document Editor
MO
Patch status unknownEPSS %0
6.5
CVE-2026-12859
IDOR in Caz Informatics' Advancity ALMS Cloud
CI
Patch status unknownEPSS %0
8.8
CVE-2026-85523
OS Command Injection in Felisify Informatics' SambaBox
FI
Patch status unknownEPSS %1
5.3
CVE-2026-11795
User Enumeration in Softtr's E-Commerce Pack
SI
Patch status unknownEPSS %0
8.8
CVE-2026-87748
Privilege Escalation via Account Takeover in Interprobe's Qorela DC
II
Patch status unknownEPSS %0
6.1
CVE-2026-87752
HTML Injection in Rolantis Information Technologies' Agentis
RI
Patch status unknownEPSS %0
5.3
CVE-2026-96777
Forma LMS Multi-User-Selector AJAX Endpoint getData getDataTask sql injection
F
Patch status unknownEPSS %0
6.5
CVE-2026-77112
SSRF Leading to JWT Token Disclosure in Global IT Informatics' Weoll
GI
Patch status unknownEPSS %0
8.7
CVE-2021-48008
Chanjet CRM SQL Injection via get_usedspace.php
CI
Patch status unknownEPSS %0