Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Exrick

First CVE: Apr 7, 2022Active for: 4 yearsTotal CVEs: 10
45.6
VTI Score
High

Exrick maintains a narrow but notably represented portfolio of e-commerce and management products, chiefly XMall and XBoot, that handle customer data and administrative functions. Vulnerabilities affecting the vendor skew strongly toward critical severity and recur through access-control, input-validation, and sensitive-data-handling weaknesses that are characteristic of web-facing business applications, with a moderate tendency to acquire public exploit code. Defenders should prioritize assessment of Exrick products in customer-facing deployments and treat authentication and session-security controls as high-risk areas; current severity, exploitation, and coverage details are shown alongside this summary.

FAUCET AI Generated
10
Total CVEs
More Total CVEs than 92% of tracked vendors
1.3
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 74% of tracked vendors
8.0
Avg CVSS Score
Higher Avg CVSS Score than 77% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Exrick over time

Volume of CVEsAvg CVSS Base Score
First CVE
Apr 7, 2022
4 years ago
Most Recent CVE
Jan 12, 2026
193 days ago

Products(2 total)

Top CVEs

Signals from CVEs in this vendor scope (10 CVEs).

10 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2024-24112CRITICAL
xmall v1.1 was discovered to contain a SQL injection vulnerability via the orderDir parameter.
Feb 6, 20249.837NOYES
CVE-2025-8526CRITICAL
A vulnerability was found in Exrick xboot up to 3.3.4. It has been declared as critical. This vulnerability affects the function Upload of the file xboot-fast/src/main/java/cn/exri
Aug 4, 20259.830NONO
CVE-2025-45612CRITICAL
Incorrect access control in xmall v1.1 allows attackers to bypass authentication via a crafted GET request to /index.
May 5, 20259.830NONO
CVE-2025-28399CRITICAL
An issue in Erick xmall v.1.1 and before allows a remote attacker to escalate privileges via the updateAddress method of the Address Controller class.
Apr 15, 20259.827NONO
CVE-2023-36331HIGH
Incorrect access control in the /member/orderList API of xmall v1.1 allows attackers to arbitrarily access other users' order details via manipulation of the query parameter userId
Jan 12, 20268.226NONO
CVE-2025-8527HIGH
A vulnerability was found in Exrick xboot up to 3.3.4. It has been rated as critical. This issue affects some unknown processing of the file xboot-fast/src/main/java/cn/exrick/xboo
Aug 4, 20258.825NONO
CVE-2021-43432MEDIUM
A Cross Site Scripting (XSS) vulnerability exists in Exrick XMall Admin Panel as of 11/7/2021 via the GET parameter in product-add.jsp.
Apr 7, 20226.124NONO
CVE-2025-65540MEDIUM
Multiple Cross-Site Scripting (XSS) vulnerabilities exist in xmall v1.1 due to improper handling of user-supplied data. User input fields such as username and description are direc
Nov 29, 20256.121NONO
CVE-2025-8528MEDIUM
A vulnerability classified as problematic has been found in Exrick xboot up to 3.3.4. Affected is an unknown function of the file /xboot/permission/getMenuList. The manipulation le
Aug 4, 20255.921NONO
CVE-2025-8525MEDIUM
A vulnerability was found in Exrick xboot up to 3.3.4. It has been classified as problematic. This affects an unknown part of the component Spring Boot Admin/Spring Actuator. The m
Aug 4, 20255.319NONO
View all 10 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products10 CVEs
40%
20%
40%
Severity distribution among all CVEs352,294 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network10 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low9 (90.0%)
High1 (10.0%)
Unknown0 (0.0%)
User Interaction
None8 (80.0%)
Unknown0 (0.0%)
Required2 (20.0%)
Privileges Required
Low1 (10.0%)
High0 (0.0%)
None9 (90.0%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (10 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
1 CVE
10.0% of CVEs· 96th percentile
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Exrick.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Exrick — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Exrick's Products

View all 2 CNAs →

Top CWEs