Workday

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Workday records in CISA KEV

No Workday vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Workday 1 record MEDIUM

Records

1 record in Workday · all components

TI-2019-09058 CVE-2019-12134 · GHSA-99wc-g6xm-mv9h

CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export…

MEDIUM 41

CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in Workday through 32 via a value (provided by a low-privileged user in a contact form field) that is mishandled in a CSV export…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01385 Published 2019-06-06 No fix listed CWE-1236

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0