Read the docs

Talent Software

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Talent Software records in CISA KEV

No Talent Software vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ecop 2 records MEDIUM Unis 1 record LOW

Records

8 records

TI-2025-11475 CVE-2025-12504 · GHSA-2867-pf3q-hj66

SQLi in Talent Software's UNIS

Priority MEDIUM 50

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Talent Software UNIS allows SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0055 Published 2025-12-09 Fixed in 42321 CWE-89
TI-2024-04333 CVE-2024-4657 · GHSA-cxpf-r354-3v48

Strored XSS in Talent Software's BAP Automation

Priority MEDIUM 48

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Talent Software BAP Automation allows Stored XSS.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00413 Published 2024-09-25 Fixed in 30840 CWE-79
TI-2023-04304 CVE-2023-4671 · GHSA-5r96-6f2m-986j

SQLi in Talent Soft's ECOP

Priority MEDIUM 43

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Talent Software ECOP allows Command Line Execution through SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00646 Published 2023-12-28 Fixed in 32255 CWE-89
TI-2025-09960 CVE-2025-10876 · GHSA-qmrc-xc5v-v23c

XSS in Talent Software's e-Bap

Priority LOW 30

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Talent Software e-BAP Automation allows Cross-Site Scripting (XSS).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00315 Published 2025-12-09 Fixed in v.41815 CWE-79
TI-2023-04305 CVE-2023-4672 · GHSA-jg2h-858x-hq45

XSS in Talent Soft's ECOP

Priority LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Talent Software ECOP allows Reflected XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00312 Published 2023-12-28 Fixed in 32255 CWE-79
TI-2023-00306 CVE-2023-0322 · GHSA-8q57-95qw-p6m2

XSS in Talent Software UNIS

Priority LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Talent Software UNIS allows Reflected XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00372 Published 2023-03-15 Fixed in 28376 CWE-79
TI-2025-06296 CVE-2025-6924 · GHSA-77x2-8vcv-5f8r

Reflected XSS in Talent Software's e-BAP

Priority LOW 24

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Talent Software e-BAP Automation allows Reflected XSS.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00188 Published 2025-12-09 Fixed in 42957 CWE-79
TI-2025-06295 CVE-2025-6923 · GHSA-3q6x-mjrg-68xw

Reflected XSS in Talent Software's UNIS

Priority LOW 24

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Talent Software UNIS allows Reflected XSS.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00188 Published 2025-12-09 Fixed in 42957 CWE-79
Open these records in search →