Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Cegid Clear all filters
TI-2024-02453 CVE-2024-2636 · GHSA-6gp7-8ggq-x9c3

Multiple vulnerabilities on Meta4 HR from Cegid

Priority MEDIUM 42

An Unrestricted Upload of File vulnerability has been found on Cegid Meta4 HR, that allows an attacker to upload malicios files to the server via '/config/espanol/update_password.jsp' file.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.00553 Published 2024-03-19 No fix listed CWE-434
TI-2024-02452 CVE-2024-2635 · GHSA-m6qm-x65x-r3hh

Multiple vulnerabilities on Meta4 HR from Cegid

Priority LOW 38

The configuration pages available are not intended to be placed on an Internet facing web server, as they expose file paths to the client, who can be an attacker.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00427 Published 2024-03-19 No fix listed CWE-698
TI-2024-02451 CVE-2024-2634 · GHSA-jm63-2957-r47v

Multiple vulnerabilities on Meta4 HR from Cegid

Priority LOW 27

A Cross-Site Scripting Vulnerability has been found on Meta4 HR affecting version 819.001.022 and earlier.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00327 Published 2024-03-19 No fix listed CWE-79
TI-2024-02450 CVE-2024-2633 · GHSA-m378-w9xj-hg9r

Multiple vulnerabilities on Meta4 HR from Cegid

Priority LOW 27

A Cross-Site Scripting Vulnerability has been found on Meta4 HR affecting version 819.001.022 and earlier.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00327 Published 2024-03-19 No fix listed CWE-79
TI-2024-02449 CVE-2024-2632 · GHSA-w628-855m-r7vg

Information Exposure Vulnerability on Meta4 HR

Priority MEDIUM 40

A Information Exposure Vulnerability has been found on Meta4 HR.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00544 Published 2024-03-19 No fix listed CWE-200