Sign in Free account Free scan

hrworks records

3 published records for vendor hrworks.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

19

Bar: total · dark part: CISA KEV.

Recurring classes

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
24Monitor	CVE-2019-11559No exploit	A reflected Cross-site scripting (XSS) vulnerability in HRworks V 1.16.1 allows remote attackers to inject arbitrary web script or HTML via hrworks · hrworks · CWE-79 Pre-auth XSS	Medium6.1	—	1.1%	Sep 17, 2019
21Monitor	CVE-2019-16416No exploit	HRworks 3.36.9 allows XSS via the purpose of a travel-expense report.hrworks · hrworks · CWE-79 XSS	Medium5.4	—	0.6%	Oct 8, 2019
21Monitor	CVE-2019-16417No exploit	HRworks FLOW 3.36.9 allows XSS via the purpose of a travel-expense report.hrworks · hrworks · CWE-79 XSS	Medium5.4	—	0.6%	Oct 8, 2019

CVE-2019-11559
24Monitor
A reflected Cross-site scripting (XSS) vulnerability in HRworks V 1.16.1 allows remote attackers to inject arbitrary web script or HTML via
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
hrworks · hrworksSep 17, 2019
CVE-2019-16416
21Monitor
HRworks 3.36.9 allows XSS via the purpose of a travel-expense report.
MediumCVSS 5.4No exploitEPSS 0%
- XSS
hrworks · hrworksOct 8, 2019
CVE-2019-16417
21Monitor
HRworks FLOW 3.36.9 allows XSS via the purpose of a travel-expense report.
MediumCVSS 5.4No exploitEPSS 0%
- XSS
hrworks · hrworksOct 8, 2019