Approved changes feed: RSS · Atom

cpe:2.3:a:jinher:jinher_oa:2.0:*:*:*:*:*:*:*

part: a version: 2.0 update: *

VendorJinher (07ee4682-14aa-5889-b26b-8e06ed2ac7cf)
ProductJinher Oa (0d9de4dc-509b-50b8-9c0e-d92ddb0886a7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-11035 vulnerable 2026-06-08 07:02:27.964558 Jinher OA text xml external entity reference
MEDIUM (6.3)
A vulnerability was determined in Jinher OA 2.0. The impacted element is an unknown function of the file /c6/Jhsoft.Web.module/ToolBar/ManageWord.aspx/?text=GetUrl&style=1. This manipulation causes xml external entity reference. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2025-09-26T18:32:07.735Z
Updated: 2025-09-26T18:49:58.495Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10816 vulnerable 2026-06-08 07:02:27.557743 Jinher OA XML text xml external entity reference
HIGH (7.3)
A security flaw has been discovered in Jinher OA 2.0. This affects an unknown part of the file /c6/Jhsoft.Web.module/ToolBar/GetWordFileName.aspx/?text=GetUrl&style=add of the component XML Handler. Performing manipulation results in xml external entity reference. The attack may be initiated remotely. The exploit has been released to the public and may be exploited.
Published: 2025-09-22T21:32:07.896Z
Updated: 2025-09-23T16:02:01.993Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.