Vendors / Smartofficepayroll Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 2 CVSS 7.0–8.9
Exploited now Smartofficepayroll records in CISA KEV No Smartofficepayroll vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 67
An issue was discovered in Smart Office Web 20.28 and earlier allows attackers to download sensitive information via the action name parameter to ExportEmployeeDetails.aspx, and to ExportReportingManager.aspx.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.59407 · Published 2023-02-28 · No fix listed
Priority HIGH 66
An issue was discovered in Smart Office Web 20.28 and earlier allows attackers to view sensitive information via DisplayParallelLogData.aspx.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.06182 · Published 2023-02-28 · No fix listed
Open these records in search → All records by CVSS severity
Critical0 High2 Medium0 Low0 No CVSS0