CVE-2026-50782

N/A

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2026-07-29

Last Modified2026-07-29

Data SourcesNVD

Vulnerability Description

Jinher OA C6 contains an XML External Entity (XXE) injection vulnerability in the /c6/JHSoft.Web.HrmAttendance/sp_manager_getUserlist.aspx/GetXmlHttp endpoint. An unauthenticated remote attacker can send a crafted XML payload to read arbitrary files from the server via an out-of-band attack.

Affected Platforms (CPE)

No CPE configurations currently published for this record.

References & Advisories

🔗 https://github.com/dihe123/CNVD-Jinher-OA-XXE/blob/main/README.md

🔗 https://github.com/dihe123/CNVD-Jinher-OA-XXE/tree/main

Vulnerability Description

Affected Platforms (CPE)

References & Advisories

相关漏洞威胁