G
Vendor security profile
gz-yami
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs9
Critical1
CISA KEV0
Public exploit7
Patch rate%0
Avg. CVSS5.9
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
7
2
CVE KEV
CVE severity distribution
9toplam CVE
Critical1 (11%)
High1 (11%)
Medium6 (67%)
Low1 (11%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%78
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
9Unknown
Latest vulnerabilities
5.3
CVE-2026-108691
mall4j through 4.0 Operator Precedence Error Deletes Other Users' Cart Items via /p/shopCart/cleanExpiryProdList
G
Patch status unknownEPSS %0
5.3
CVE-2026-108690
mall4j through 4.0 Operator Precedence Error Exposes Other Users' Cart Items via /p/shopCart/expiryProdList
G
Patch status unknownEPSS %0
5.3
CVE-2026-102367
mall4j through 4.0 Insufficient Session Expiration via Token Refresh
G
Patch status unknownEPSS %0
2.1
CVE-2026-102366
mall4j through 4.0 Unrestricted File Upload in Admin File Endpoints
G
Patch status unknownEPSS %0
7.1
CVE-2026-102365
mall4j through 4.0 Missing Authorization in Admin User Address Endpoints
G
Patch status unknownEPSS %0
5.3
CVE-2026-102364
mall4j through 4.0 Improper Authentication Accepts Storefront Tokens on Admin API
G
Patch status unknownEPSS %0
6.3
CVE-2026-102363
mall4j through 4.0 Unauthenticated Shipment Tracking Disclosure via Order Number
G
Patch status unknownEPSS %0
6.9
CVE-2026-102362
mall4j through 4.0 Missing Authentication in Product Review Deletion
G
Patch status unknownEPSS %0
9.3
CVE-2026-102361
mall4j through 4.0 Missing Authentication in Password Update Endpoint
G
Patch status unknownEPSS %0