Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Websoft Clear all filters
TI-2022-23245 CVE-2022-46906 · GHSA-3gqx-89wv-8h66

Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated…

Priority LOW 24

Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programm…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00364 Published 2022-12-12 No fix listed CWE-79
TI-2022-23244 CVE-2022-46905 · GHSA-qcgv-jc82-m3g3

Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an…

Priority LOW 27

Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an unauthenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript progra…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0041 Published 2022-12-12 No fix listed CWE-79
TI-2022-23243 CVE-2022-46904 · GHSA-4pw7-599v-2mmh

Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated…

Priority LOW 24

Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programm…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00364 Published 2022-12-12 No fix listed CWE-79
TI-2022-23242 CVE-2022-46903 · GHSA-66r9-9rr5-9r2h

Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated…

Priority LOW 24

Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programm…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00364 Published 2022-12-12 No fix listed CWE-79