Read the docs

Synel

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Synel records in CISA KEV

No Synel vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Eharmony 3 records LOW Synergy/a Firmware 3 records MEDIUM Bioentry-w2 Firmware 1 record MEDIUM Bioentry P2 Firmware 1 record MEDIUM Biolite-n2 Firmware 1 record MEDIUM Eharmonynew 1 record LOW Sy-711 Firmware 1 record MEDIUM Sy-715 Firmware 1 record MEDIUM

Records

9 records

TI-2022-07039 CVE-2022-22790 · GHSA-x2v2-qh6j-j5r3

SYNEL - eharmony Directory Traversal

Priority LOW 35

SYNEL - eharmony Directory Traversal.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01023 Published 2022-01-28 No fix listed CWE-22
TI-2022-15575 CVE-2022-34768 · GHSA-j394-f827-96m2

Synel - eHarmony Stored XSS

Priority LOW 33

insert HTML / js code inside input how to get to the vulnerable input : Workers > worker nickname > inject in this input the code.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00505 Published 2022-08-05 No fix listed CWE-79
TI-2021-14856 CVE-2021-36718 · GHSA-wcm8-3x8r-4qjc

Improper authentication in Synel eharmonynew, Synel Reports

Priority LOW 30

SYNEL - eharmonynew / Synel Reports - The attacker can log in to the system with default credentials and export a report of eharmony system with sensetive data (Employee name, Employee ID number, Working hours etc') The…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00566 Published 2021-12-08 No fix listed CWE-287
TI-2022-17019 CVE-2022-36778 · GHSA-g3qr-2f35-f8xg

Synel - eHarmony Stored XSS

Priority LOW 29

insert HTML / js code inside input how to get to the vulnerable input : Workers > worker nickname > inject in this input the code.

CVSS 3.1MEDIUM 6.5 Adjacent network Low privileges No interaction EPSS 0.00463 Published 2022-09-13 No fix listed CWE-79
Open these records in search →