Read the docs

Openbaraza

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Openbaraza records in CISA KEV

No Openbaraza vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Openbaraza Human Capital Management 2 records LOW

Records

2 records

TI-2021-16201 CVE-2021-38619 · GHSA-85vm-cfjv-9rmf

openBaraza HCM 3.1.6 does not properly neutralize user-controllable input: an…

Priority LOW 31

openBaraza HCM 3.1.6 does not properly neutralize user-controllable input: an unauthenticated remote attacker can conduct a stored cross-site scripting (XSS) attack against an administrative user from hr/subscription.jsp…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02012 Published 2021-08-13 No fix listed CWE-79
TI-2021-16173 CVE-2021-38583 · GHSA-fmgv-52p5-c3v2

openBaraza HCM 3.1.6 does not properly neutralize user-controllable input, which allows…

Priority LOW 30

openBaraza HCM 3.1.6 does not properly neutralize user-controllable input, which allows reflected cross-site scripting (XSS) on multiple pages: hr/subscription.jsp and hr/application.jsp and and hr/index.jsp (with view=…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01548 Published 2021-08-13 No fix listed CWE-79
Open these records in search →