{"cvss":0.0,"datePublished":"2026-03-31T00:00:00Z","dateUpdated":"2026-03-31T00:00:00Z","description":"A flaw has been found in Jinher OA up to 1.2. The impacted element is an unknown function of the file /C6/Jhsoft.Web.departments/GetTreeDate.aspx. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used.","dueDate":"","id":"CVE-2025-10090","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"jinher_oa","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"jinher jinher_oa Improper Neutralization of Special Elements in Output Used by a Downstream Component","vendor":"jinher"}