Read the docs

Websoft

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Websoft records in CISA KEV

No Websoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Websoft Hcm 4 records LOW Infinity Web 1 record LOW

Records

4 records in Websoft Hcm · all components

TI-2022-23244 CVE-2022-46905 · GHSA-qcgv-jc82-m3g3

Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an…

Priority LOW 27

Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an unauthenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript progra…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0041 Published 2022-12-12 No fix listed CWE-79
TI-2022-23245 CVE-2022-46906 · GHSA-3gqx-89wv-8h66

Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated…

Priority LOW 24

Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programm…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00364 Published 2022-12-12 No fix listed CWE-79
TI-2022-23243 CVE-2022-46904 · GHSA-4pw7-599v-2mmh

Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated…

Priority LOW 24

Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programm…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00364 Published 2022-12-12 No fix listed CWE-79
TI-2022-23242 CVE-2022-46903 · GHSA-66r9-9rr5-9r2h

Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated…

Priority LOW 24

Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programm…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00364 Published 2022-12-12 No fix listed CWE-79
Open these records in search →