Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: Harriscomputer Component: Ormed Mis Clear all filters
TI-2019-13470 CVE-2019-18626 · GHSA-84cx-5p9q-mqrm

Harris Ormed Self Service before 2019.1.4 allows an authenticated user to view W-2 forms…

Priority LOW 21

Harris Ormed Self Service before 2019.1.4 allows an authenticated user to view W-2 forms belonging to other users via an arbitrary empNo value to the ORMEDMIS/Data/PY/T4W2Service.svc/RetrieveW2EntriesForEmployee URI, thu…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00617 Published 2020-03-25 No fix listed CWE-639