Verint

Records17All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

Verint records in CISA KEV

No Verint vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

6 records in Workforce Optimization · all components

TI-2021-14771 CVE-2021-36450 · GHSA-fw5r-p8w4-82wr

MEDIUM 63

Verint Workforce Optimization (WFO) 15.2.8.10048 allows XSS via the control/my_notifications NEWUINAV parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.64294 Published 2021-12-15 No fix listed CWE-79

TI-2024-24182 CVE-2024-36396 · GHSA-3cc8-7xhw-x4w6

MEDIUM 40

Verint - CWE-434: Unrestricted Upload of File with Dangerous Type

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00438 Published 2024-06-13 Fixed in Upgrade to version 15.2.1030 or greater. CWE-434

TI-2024-24181 CVE-2024-36395 · GHSA-36cf-mq32-6x43

LOW 27

Verint - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00254 Published 2024-06-13 Fixed in Upgrade to version 15.2.1030 or greater. CWE-80

TI-2020-14557 CVE-2020-23446 · GHSA-5jc7-qjrp-83hw

LOW 27

Verint Workforce Optimization suite 15.1 (15.1.0.37634) has Unauthenticated Information Disclosure via API

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01237 Published 2020-09-22 No fix listed CWE-639

TI-2021-18448 CVE-2021-41825 · GHSA-f39v-q624-j2vx

LOW 26

Verint Workforce Optimization (WFO) 15.2.5.1033 allows HTML injection via the /wfo/control/signin username parameter.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01092 Published 2021-10-08 No fix listed CWE-79

TI-2020-10570 CVE-2020-13480 · GHSA-rmrx-q22j-r2fx

LOW 26

Verint Workforce Optimization (WFO) 15.2 allows HTML injection via the "send email" feature.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00979 Published 2020-06-22 No fix listed CWE-79