Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: HYPR Workforce Access 8.7 Clear all filters
TI-2023-05815 CVE-2023-6336 · GHSA-ghh4-4cxh-fcwj

Link following in HYPR Workforce Access

Priority LOW 33

Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on MacOS allows User-Controlled Filename.This issue affects Workforce Access: before 8.7.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00176 Published 2024-01-16 Fixed in 8.7 CWE-59
TI-2023-05814 CVE-2023-6335 · GHSA-mmp5-hrvp-29pp

Link following in HYPR Workforce Access

Priority LOW 33

Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on Windows allows User-Controlled Filename.This issue affects Workforce Access: before 8.7.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0018 Published 2024-01-16 Fixed in 8.7 CWE-59
TI-2023-05813 CVE-2023-6334 · GHSA-75hv-cf97-m8r8

Buffer overflow in HYPR Workforce Access

Priority LOW 35

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in HYPR Workforce Access on Windows allows Overflow Buffers.This issue affects Workforce Access: before 8.7.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00147 Published 2024-01-16 Fixed in 8.7 CWE-120
TI-2023-04687 CVE-2023-5097 · GHSA-gqr6-mcvx-pvm6

Path traversal in HYPR Workforce Access

Priority LOW 30

Improper Input Validation vulnerability in HYPR Workforce Access on Windows allows Path Traversal.This issue affects Workforce Access: before 8.7.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00187 Published 2024-01-16 Fixed in 8.7 CWE-22