Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Openbaraza Component: Openbaraza Human Capital Management Clear all filters
TI-2021-16201 CVE-2021-38619 · GHSA-85vm-cfjv-9rmf

openBaraza HCM 3.1.6 does not properly neutralize user-controllable input: an…

Priority LOW 31

openBaraza HCM 3.1.6 does not properly neutralize user-controllable input: an unauthenticated remote attacker can conduct a stored cross-site scripting (XSS) attack against an administrative user from hr/subscription.jsp…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02012 Published 2021-08-13 No fix listed CWE-79
TI-2021-16173 CVE-2021-38583 · GHSA-fmgv-52p5-c3v2

openBaraza HCM 3.1.6 does not properly neutralize user-controllable input, which allows…

Priority LOW 30

openBaraza HCM 3.1.6 does not properly neutralize user-controllable input, which allows reflected cross-site scripting (XSS) on multiple pages: hr/subscription.jsp and hr/application.jsp and and hr/index.jsp (with view=…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01548 Published 2021-08-13 No fix listed CWE-79