Vendors / Hrsale Project Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 3
Exploited now Hrsale Project records in CISA KEV No Hrsale Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 46
A Local File Inclusion vulnerability was found in HRSALE The Ultimate HRM v1.0.2, exploitable by a low privileged user.
CVSS 3.0 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.05531 · Published 2018-05-01 · No fix listed CWE-20
Priority MEDIUM 45
A CSV Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user with low level privileges to inject a command that will be included in the exported CSV file, leading to possible code exe…
CVSS 3.0 HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.04167 · Published 2018-05-01 · No fix listed CWE-1236
Priority MEDIUM 43
A SQL Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user with low level privileges to directly modify the SQL query.
CVSS 3.0 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02483 · Published 2018-05-01 · No fix listed CWE-89
Priority LOW 28
An Authenticated Stored XSS vulnerability was found in HRSALE The Ultimate HRM v1.0.2, exploitable by a low privileged user.
CVSS 3.0 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.0155 · Published 2018-05-01 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 3 1 0 0
THREATIST.IORead the docs