L
Vendor security profile
lenve
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs8
Critical0
CISA KEV0
Public exploit7
Patch rate%0
Avg. CVSS6.3
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
7
1
CVE KEV
CVE severity distribution
8toplam CVE
High3 (38%)
Medium5 (63%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%88
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
8Unknown
Latest vulnerabilities
7.1
CVE-2026-110217
vhr through commit 03abbd3 Information Disclosure of Operator Password Hashes via GET /chat/hrs
L
Patch status unknown
5.3
CVE-2026-90501
lenve vhr HrMapper.xml HrInfoController.updateHr privileges management
L
Patch status unknownEPSS %0
5.3
CVE-2026-90500
lenve vhr Avatar Upload userface FastDFSUtils.upload unrestricted upload
L
Patch status unknownEPSS %0
5.3
CVE-2026-90499
lenve vhr Password Update pass HrInfoController.updatePass improper authorization
L
Patch status unknownEPSS %0
6.9
CVE-2026-90498
lenve vhr vhr.sql default credentials
L
Patch status unknownEPSS %0
5.3
CVE-2026-90490
lenve vhr MailReceiver deserialization
L
Patch status unknownEPSS %0
7.2
CVE-2026-85214
vhr Missing Authorization in PUT /hr/info Allows Arbitrary Profile Overwrite
L
Patch status unknownEPSS %1
7.7
CVE-2026-85182
vhr Missing Authorization in PUT /hr/pass Allows Cross-Account Password Change
L
Patch status unknownEPSS %0