Read the docs

HYPR

Records20All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high12CVSS 7.0–8.9

Exploited now

HYPR records in CISA KEV

No HYPR vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Workforce Access 8 records MEDIUM Hypr Server 4 records MEDIUM Hypr 1 record LOW Keycloak Authenticator 1 record MEDIUM

Records

8 records in Workforce Access · all components

TI-2023-00790 CVE-2023-0834 · GHSA-jg74-q54f-rr76

Incorrect permission assignment in HYPR Workforce Access

Priority MEDIUM 43

Incorrect Permission Assignment for Critical Resource vulnerability in HYPR Workforce Access on MacOS allows Privilege Escalation.This issue affects Workforce Access: from 6.12 before 8.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00368 Published 2023-04-28 Fixed in 8.1 CWE-732
TI-2022-03010 CVE-2022-3258 · GHSA-xvgv-pgqg-27v8

Incorrect permission assignment in HYPR Workforce Access

Priority LOW 38

Incorrect Permission Assignment for Critical Resource vulnerability in HYPR Workforce Access on Windows allows Authentication Abuse.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00272 Published 2022-11-03 Fixed in 7.7.1 CWE-732
TI-2023-05813 CVE-2023-6334 · GHSA-75hv-cf97-m8r8

Buffer overflow in HYPR Workforce Access

Priority LOW 35

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in HYPR Workforce Access on Windows allows Overflow Buffers.This issue affects Workforce Access: before 8.7.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00147 Published 2024-01-16 Fixed in 8.7 CWE-120
TI-2023-05815 CVE-2023-6336 · GHSA-ghh4-4cxh-fcwj

Link following in HYPR Workforce Access

Priority LOW 33

Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on MacOS allows User-Controlled Filename.This issue affects Workforce Access: before 8.7.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00176 Published 2024-01-16 Fixed in 8.7 CWE-59
TI-2023-05814 CVE-2023-6335 · GHSA-mmp5-hrvp-29pp

Link following in HYPR Workforce Access

Priority LOW 33

Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on Windows allows User-Controlled Filename.This issue affects Workforce Access: before 8.7.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0018 Published 2024-01-16 Fixed in 8.7 CWE-59
TI-2022-01839 CVE-2022-1984 · GHSA-jj9f-2mf3-f7x2

Deserialization of untrusted data in HYPR Windows WFA

Priority LOW 33

This issue affects: HYPR Windows WFA versions prior to 7.2; Unsafe Deserialization vulnerability in HYPR Workforce Access (WFA) before version 7.2 may allow local authenticated attackers to elevate privileges via a malic…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0018 Published 2022-07-19 Fixed in 7.2 CWE-502
TI-2024-00059 CVE-2024-0068 · GHSA-c48c-24j9-j745

Link following in HYPR Workforce Access

Priority LOW 31

Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on MacOS allows File Manipulation.This issue affects Workforce Access: before 8.7.1.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00216 Published 2024-02-29 Fixed in 8.7.1 CWE-59
TI-2023-04687 CVE-2023-5097 · GHSA-gqr6-mcvx-pvm6

Path traversal in HYPR Workforce Access

Priority LOW 30

Improper Input Validation vulnerability in HYPR Workforce Access on Windows allows Path Traversal.This issue affects Workforce Access: before 8.7.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00187 Published 2024-01-16 Fixed in 8.7 CWE-22
Open these records in search →