Vulnerabilities

TI-2026-17503 CVE-2026-21730 · GHSA-pqwf-7gjw-fvph

Stored XSS in Verba

LOW 23

Verba is affected by a Stored Cross-Site Scripting (XSS) vulnerability within its login logging mechanism.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00205 Published 2026-05-14 Fixed in 10.0.6 CWE-79

TI-2024-24182 CVE-2024-36396 · GHSA-3cc8-7xhw-x4w6

Verint - CWE-434: Unrestricted Upload of File with Dangerous Type

MEDIUM 40

Verint - CWE-434: Unrestricted Upload of File with Dangerous Type

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00438 Published 2024-06-13 Fixed in Upgrade to version 15.2.1030 or greater. CWE-434

TI-2024-24181 CVE-2024-36395 · GHSA-36cf-mq32-6x43

Verint - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

LOW 27

Verint - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00254 Published 2024-06-13 Fixed in Upgrade to version 15.2.1030 or greater. CWE-80

TI-2023-16427 CVE-2023-33257 · GHSA-r4w3-vrfm-6f6m

Verint Engagement Management 15.3 Update 2023R2 is vulnerable to HTML injection via the user data form in the live chat.

MEDIUM 58

Verint Engagement Management 15.3 Update 2023R2 is vulnerable to HTML injection via the user data form in the live chat.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.004 Published 2023-08-02 No fix listed CWE-79

TI-2020-10130 CVE-2020-12744 · GHSA-8w43-765r-w2w5

The MSI installer in Verint Desktop Resources 15.2 allows an unprivileged local user to…

LOW 35

The MSI installer in Verint Desktop Resources 15.2 allows an unprivileged local user to elevate their privileges during install or repair.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00207 Published 2022-10-20 No fix listed CWE-281

TI-2021-14771 CVE-2021-36450 · GHSA-fw5r-p8w4-82wr

Verint Workforce Optimization (WFO) 15.2.8.10048 allows XSS via the control/my_notifications NEWUINAV parameter.

MEDIUM 63

Verint Workforce Optimization (WFO) 15.2.8.10048 allows XSS via the control/my_notifications NEWUINAV parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.64294 Published 2021-12-15 No fix listed CWE-79

TI-2021-18448 CVE-2021-41825 · GHSA-f39v-q624-j2vx

Verint Workforce Optimization (WFO) 15.2.5.1033 allows HTML injection via the /wfo/control/signin username parameter.

LOW 26

Verint Workforce Optimization (WFO) 15.2.5.1033 allows HTML injection via the /wfo/control/signin username parameter.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01092 Published 2021-10-08 No fix listed CWE-79

TI-2020-14557 CVE-2020-23446 · GHSA-5jc7-qjrp-83hw

Verint Workforce Optimization suite 15.1 (15.1.0.37634) has Unauthenticated Information Disclosure via API

LOW 27

Verint Workforce Optimization suite 15.1 (15.1.0.37634) has Unauthenticated Information Disclosure via API

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01237 Published 2020-09-22 No fix listed CWE-639

TI-2020-14790 CVE-2020-24057 · GHSA-8h95-8w2q-whv4

The management website of the Verint S5120FD Verint_FW_0_42 unit features a CGI endpoint…

MEDIUM 46

The management website of the Verint S5120FD Verint_FW_0_42 unit features a CGI endpoint ('ipfilter.cgi') that allows the user to manage network filtering on the unit.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.05483 Published 2020-08-21 No fix listed CWE-78

TI-2020-14789 CVE-2020-24056 · GHSA-4xwv-xw85-x4w9

A hardcoded credentials vulnerability exists in Verint 5620PTZ Verint_FW_0_42, Verint…

LOW 35

A hardcoded credentials vulnerability exists in Verint 5620PTZ Verint_FW_0_42, Verint 4320 V4320_FW_0_23, V4320_FW_0_31, and Verint S5120FD Verint_FW_0_42units.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01246 Published 2020-08-21 No fix listed CWE-798

TI-2020-14788 CVE-2020-24055 · GHSA-hwq2-hggg-hphp

Verint 5620PTZ Verint_FW_0_42 and Verint 4320 V4320_FW_0_23, and V4320_FW_0_31 units…

MEDIUM 45

Verint 5620PTZ Verint_FW_0_42 and Verint 4320 V4320_FW_0_23, and V4320_FW_0_31 units feature an autodiscovery service implemented in the binary executable '/usr/sbin/DM' that listens on port TCP 6666.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01624 Published 2020-08-21 No fix listed CWE-787

TI-2019-09560 CVE-2019-12773 · GHSA-3rqm-h9m6-6rw6

An issue was discovered in Verint Impact 360 15.1.

LOW 29

An issue was discovered in Verint Impact 360 15.1.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00843 Published 2020-07-14 No fix listed CWE-79

TI-2019-09570 CVE-2019-12784 · GHSA-wprw-q57v-22f2

An issue was discovered in Verint Impact 360 15.1.

LOW 39

An issue was discovered in Verint Impact 360 15.1.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00685 Published 2020-07-14 No fix listed CWE-352

TI-2019-09569 CVE-2019-12783 · GHSA-2m2f-v78g-328f

An issue was discovered in Verint Impact 360 15.1.

LOW 29

An issue was discovered in Verint Impact 360 15.1.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00862 Published 2020-07-14 No fix listed CWE-601

TI-2020-10570 CVE-2020-13480 · GHSA-rmrx-q22j-r2fx

Verint Workforce Optimization (WFO) 15.2 allows HTML injection via the "send email" feature.

LOW 26

Verint Workforce Optimization (WFO) 15.2 allows HTML injection via the "send email" feature.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00979 Published 2020-06-22 No fix listed CWE-79

TI-2018-12706 CVE-2018-17872 · GHSA-fvjv-x755-wvc8

Verba Collaboration Compliance and Quality Management Platform before 9.2.1.5545 has Insecure Permissions.

MEDIUM 42

Verba Collaboration Compliance and Quality Management Platform before 9.2.1.5545 has Insecure Permissions.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02243 Published 2018-10-04 No fix listed CWE-732

TI-2018-12705 CVE-2018-17871 · GHSA-fwvg-vmq9-vfp5

Verba Collaboration Compliance and Quality Management Platform before 9.2.1.5545 has Incorrect Access Control.

LOW 32

Verba Collaboration Compliance and Quality Management Platform before 9.2.1.5545 has Incorrect Access Control.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01785 Published 2018-10-04 No fix listed CWE-522

Vulnerabilities

Filters