TI-2019-13470 CVE-2019-18626 · GHSA-84cx-5p9q-mqrmHarris Ormed Self Service before 2019.1.4 allows an authenticated user to view W-2 forms…Priority LOW 21Harris Ormed Self Service before 2019.1.4 allows an authenticated user to view W-2 forms belonging to other users via an arbitrary empNo value to the ORMEDMIS/Data/PY/T4W2Service.svc/RetrieveW2EntriesForEmployee URI, thu…CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00617 · Published 2020-03-25 · No fix listed CWE-639