ConnX

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

ConnX records in CISA KEV

No ConnX vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Esp Hr Management 2 records MEDIUM

Records

2 records

TI-2015-03410 CVE-2015-4043 · GHSA-rm4h-ff8h-qc77

SQL injection vulnerability in ConnX ESP HR Management 4.4.0 allows remote attackers to…

MEDIUM 45

SQL injection vulnerability in ConnX ESP HR Management 4.4.0 allows remote attackers to execute arbitrary SQL commands via the ctl00$cphMainContent$txtUserName parameter to frmLogin.aspx.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01258 Published 2018-06-19 No fix listed CWE-89

TI-2024-06733 CVE-2024-7269 · GHSA-x928-8f88-6fjf

Stored XSS in ConnX ESP HR Management

MEDIUM 40

Improper Neutralization of Input During Web Page Generation vulnerability in "Update of Personal Details" form in ConnX ESP HR Management allows Stored XSS attack.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00371 Published 2024-08-28 Fixed in 6.6 CWE-79

Open these records in search →

Critical	1
High	1
Medium	0
Low	0
No CVSS	0