Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Vendor: Synel Clear all filters
TI-2022-17019 CVE-2022-36778 · GHSA-g3qr-2f35-f8xg

Synel - eHarmony Stored XSS

Priority LOW 29

insert HTML / js code inside input how to get to the vulnerable input : Workers > worker nickname > inject in this input the code.

CVSS 3.1MEDIUM 6.5 Adjacent network Low privileges No interaction EPSS 0.00463 Published 2022-09-13 No fix listed CWE-79
TI-2022-15575 CVE-2022-34768 · GHSA-j394-f827-96m2

Synel - eHarmony Stored XSS

Priority LOW 33

insert HTML / js code inside input how to get to the vulnerable input : Workers > worker nickname > inject in this input the code.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00505 Published 2022-08-05 No fix listed CWE-79
TI-2022-07039 CVE-2022-22790 · GHSA-x2v2-qh6j-j5r3

SYNEL - eharmony Directory Traversal

Priority LOW 35

SYNEL - eharmony Directory Traversal.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01023 Published 2022-01-28 No fix listed CWE-22
TI-2021-14856 CVE-2021-36718 · GHSA-wcm8-3x8r-4qjc

Improper authentication in Synel eharmonynew, Synel Reports

Priority LOW 30

SYNEL - eharmonynew / Synel Reports - The attacker can log in to the system with default credentials and export a report of eharmony system with sensetive data (Employee name, Employee ID number, Working hours etc') The…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00566 Published 2021-12-08 No fix listed CWE-287