L
Vendor security profile
lenve
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs7
Critical0
CISA KEV0
Public exploit7
Patch rate%0
Avg. CVSS6.1
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
7
0
CVE KEV
CVE severity distribution
7toplam CVE
High2 (29%)
Medium5 (71%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%100
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
7Unknown
Latest vulnerabilities
5.3
CVE-2026-90501
lenve vhr HrMapper.xml HrInfoController.updateHr privileges management
L
Patch status unknownEPSS %0
5.3
CVE-2026-90500
lenve vhr Avatar Upload userface FastDFSUtils.upload unrestricted upload
L
Patch status unknownEPSS %0
5.3
CVE-2026-90499
lenve vhr Password Update pass HrInfoController.updatePass improper authorization
L
Patch status unknownEPSS %0
6.9
CVE-2026-90498
lenve vhr vhr.sql default credentials
L
Patch status unknownEPSS %0
5.3
CVE-2026-90490
lenve vhr MailReceiver deserialization
L
Patch status unknownEPSS %0
7.2
CVE-2026-85214
vhr Missing Authorization in PUT /hr/info Allows Arbitrary Profile Overwrite
L
Patch status unknownEPSS %1
7.7
CVE-2026-85182
vhr Missing Authorization in PUT /hr/pass Allows Cross-Account Password Change
L
Patch status unknownEPSS %0