Vendor

    Exrick

    13 known vulnerabilities in products by Exrick, 0 of them actively exploited (CISA KEV).

    Key figures

    13

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Exrick
    CriticalCVE-2024-24112

    Exrick Xmall: SQL Injection

    		9.8
    CriticalCVE-2025-28399

    Exrick Xmall: Privilege Escalation

    		9.8
    CriticalCVE-2025-45612

    Exrick Xmall: Authentication Bypass

    		9.8
    MediumCVE-2026-90571

    Exrick xmall Order Printing order-print.jsp cross site scripting

    		4.3
    MediumCVE-2026-111689

    XBoot through 3.3.4 Authorization Bypass via getByDepartmentId Endpoint

    		4.3
    MediumCVE-2026-111688

    Exrick XBoot through 3.3.4 Data-Scope Bypass via openDataFilter Parameter

    		4.3
    MediumCVE-2025-8525

    Exrick xboot Spring Boot Admin/Spring Actuator information disclosure

    		5.3
    MediumCVE-2021-43432

    Exrick Xmall: Cross-Site Scripting (XSS)

    		6.1
    HighCVE-2023-36331

    Exrick Xmall: Improper Access Control

    		8.2
    CriticalCVE-2025-8526

    Exrick xboot UploadController.java upload unrestricted upload

    		6.3
    HighCVE-2025-8527

    Exrick xboot Swagger SecurityController.java server-side request forgery

    		6.3
    MediumCVE-2025-8528

    Exrick xboot getMenuList sensitive information in a cookie

    		3.7
    MediumCVE-2025-65540

    Exrick Xmall: Cross-site Scripting

    		6.1

    Products

    Products by Exrick
    Xmall70
    Exrick xboot60