e
exrick
Security Risk Profile
26
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 12 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 7, 2022 to present
12
Total CVEs
4
Critical+High
0
Exploited
4
Unpatched
Threat Assessment
Avg CVSS
5.9
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
4
Critical/High
Risk Level
26/100
low
🆕 2Fresh (<7d)📈 2 in Last 30 Days
Severity Distribution
Critical
3High
1Medium
5Low
3Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
6Age Distribution
Common Weaknesses (CWE)
1
XSS
2
2
SSRF
1
3
Malicious File Upload
1
4
Infoleak
1
5
SQL Injection
1
Most Affected Products
1. Exrick xboot10
2. Exrick XMall6
3. xmall xmall3
4. Erick xmall1
Recent Vulnerabilities
See more →CVE-2026-111689
CVSS 4.3medium
XBoot through 3.3.4 Authorization Bypass via getByDepartmentId Endpoint
Oct 16, 2026🔧 No Patch
CVE-2026-111688
CVSS 4.3medium
Exrick XBoot through 3.3.4 Data-Scope Bypass via openDataFilter Parameter
Oct 16, 2026🔧 No Patch
CVE-2023-36331
CVSS 8.2high
Jan 12, 2026🔧 No Patch
CVE-2025-65540
CVSS 6.1medium
Nov 29, 2025🔧 No Patch
CVE-2025-8528
CVSS 2.9EPSS 0%low
Exrick xboot getMenuList sensitive information in a cookie
Aug 4, 2025🔧 No Patch
CVE-2025-8527
CVSS 2.1EPSS 0%low
Exrick xboot Swagger SecurityController.java server-side request forgery
Aug 4, 2025🔧 No Patch
CVE-2025-8526
CVSS 2.1EPSS 0%low
Exrick xboot UploadController.java upload unrestricted upload
Aug 4, 2025🔧 No Patch
CVE-2025-8525
CVSS 5.5EPSS 0%medium
Exrick xboot Spring Boot Admin/Spring Actuator information disclosure
Aug 4, 2025🔧 No Patch
CVE-2025-45612
CVSS 9.8EPSS 0%critical
May 5, 2025🔧 No Patch
CVE-2025-28399
CVSS 9.8critical
Apr 15, 2025🔧 No Patch
Monitor exrick in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.