Read the docs

Humanica

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Humanica records in CISA KEV

No Humanica vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Humatrix 7 3 records MEDIUM Humatrix 1 record LOW

Records

4 records

TI-2019-11298 CVE-2019-15130 · GHSA-v9q3-wwmw-45rq

The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an…

Priority MEDIUM 47

The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to upload any file type to a candidate's profile picture folder via a crafted recruitment_online/personalData/act_p…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02405 Published 2019-08-18 No fix listed CWE-330
TI-2019-12099 CVE-2019-16106 · GHSA-2hw3-wmq2-hxf7

The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an…

Priority LOW 35

The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to change the password of any user via the recruitment_online/personalData/act_acounttab.cfm txtNewUserName and hdN…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01114 Published 2019-09-10 No fix listed CWE-276
TI-2019-11297 CVE-2019-15129 · GHSA-3h4g-q9gm-hwvc

The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an…

Priority LOW 27

The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to access all candidates' files in the photo folder on the website by specifying a "user id" parameter and file nam…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.013 Published 2019-08-18 No fix listed CWE-306
Open these records in search →