Vendors / Minthcm Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 0
Exploited now Minthcm records in CISA KEV No Minthcm vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 60
In MintHCM 4.0.3, a registered user can execute arbitrary JavaScript code and achieve a reflected Cross-site Scripting (XSS) attack.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00301 · Published 2024-06-14 · No fix listed CWE-79
Priority MEDIUM 44
A weak password requirement vulnerability exists in the Create New User function of MintHCM RELEASE 3.0.8, which could lead an attacker to easier password brute-forcing.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01183 · Published 2021-04-26 · No fix listed CWE-521
Priority LOW 28
The Import function in MintHCM RELEASE 3.0.8 allows an attacker to execute a cross-site scripting (XSS) payload in file-upload.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00586 · Published 2021-04-26 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
1 0 2 0 0
