Vendors / Cegid Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 2
Exploited now Cegid records in CISA KEV No Cegid vulnerabilities are listed in CISA KEV.
Priority MEDIUM 42
An Unrestricted Upload of File vulnerability has been found on Cegid Meta4 HR, that allows an attacker to upload malicios files to the server via '/config/espanol/update_password.jsp' file.
CVSS 3.1 CRITICAL 9.0· Network · No auth · No interaction · EPSS 0.00553 · Published 2024-03-19 · No fix listed CWE-434
Priority MEDIUM 40
A Information Exposure Vulnerability has been found on Meta4 HR.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00544 · Published 2024-03-19 · No fix listed CWE-200
Priority LOW 38
The configuration pages available are not intended to be placed on an Internet facing web server, as they expose file paths to the client, who can be an attacker.
CVSS 3.1 HIGH 7.3· Network · No auth · No interaction · EPSS 0.00427 · Published 2024-03-19 · No fix listed CWE-698
Priority LOW 27
A Cross-Site Scripting Vulnerability has been found on Meta4 HR affecting version 819.001.022 and earlier.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00327 · Published 2024-03-19 · No fix listed CWE-79
Priority LOW 27
A Cross-Site Scripting Vulnerability has been found on Meta4 HR affecting version 819.001.022 and earlier.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00327 · Published 2024-03-19 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
1 2 2 0 0
THREATIST.IORead the docs