İçeriğe atla
Noroxi

IceHrm kayıtları

icehrm üreticisine ait 15 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 20
  3. 21
  4. 22
  5. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

15 kayıt
  • CVE-2021-38823
    39İzleyin

    The IceHrm 30.0.0 OS website was found vulnerable to Session Management Issue.

    KritikCVSS 9,8İstismar yokEPSS %1

    icehrm · icehrm4 Eki 2021

  • CVE-2021-34244
    35İzleyin

    A cross site request forgery (CSRF) vulnerability was discovered in Ice Hrm 29.0.0.OS which allows attackers to create new admin accounts or

    YüksekCVSS 8,8İstismar yokEPSS %0

    icehrm · icehrm22 Haz 2021

  • CVE-2020-9270
    35İzleyin

    ICE Hrm 26.2.0 is vulnerable to CSRF that leads to password reset via service.php.

    YüksekCVSS 8,8İstismar yokEPSS %0

    icehrm · icehrm18 Şub 2020

  • CVE-2018-12420
    30İzleyin

    IceHrm before 23.0.1.OS has a risky usage of a hashed password in a request.

    YüksekCVSS 7,5İstismar yokEPSS %0

    icehrm · icehrm14 Haz 2018

  • CVE-2020-6114
    29İzleyin

    An exploitable SQL injection vulnerability exists in the Admin Reports functionality of Glacies IceHRM v26.6.0.OS (Commit bb274de1751ffb9d09

    YüksekCVSS 7,2İstismar yokEPSS %1

    icehrm · icehrm10 Tem 2020

  • CVE-2022-26588
    26İzleyin

    A Cross-Site Request Forgery (CSRF) in IceHrm 31.0.0.OS allows attackers to delete arbitrary users or achieve account takeover via the app/s

    OrtaCVSS 6,5İstismar yokEPSS %0

    icehrm · icehrm8 Nis 2022

  • CVE-2020-9271
    26İzleyin

    ICE Hrm 26.2.0 is vulnerable to CSRF that leads to user creation via service.php.

    OrtaCVSS 6,5İstismar yokEPSS %0

    icehrm · icehrm18 Şub 2020

  • CVE-2021-35045
    24İzleyin

    Cross site scripting (XSS) vulnerability in Ice Hrm 29.0.0.OS, allows attackers to execute arbitrary code via the parameters to the /app/ en

    OrtaCVSS 6,1İstismar yokEPSS %1

    icehrm · icehrm22 Haz 2021

  • CVE-2021-35046
    24İzleyin

    A session fixation vulnerability was discovered in Ice Hrm 29.0.0 OS which allows an attacker to hijack a valid user session via a crafted s

    OrtaCVSS 6,1İstismar yokEPSS %0

    icehrm · icehrm22 Haz 2021

  • CVE-2022-25013
    24İzleyin

    Ice Hrm 30.0.0.OS was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities via the "key" and "fm" parameters

    OrtaCVSS 6,1İstismar yokEPSS %0

    icehrm · icehrm28 Şub 2022

  • CVE-2022-25014
    24İzleyin

    Ice Hrm 30.0.0.OS was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the "m" parameter in the Dashboard of t

    OrtaCVSS 6,1İstismar yokEPSS %0

    icehrm · icehrm28 Şub 2022

  • CVE-2023-6282
    24İzleyin

    Cross-Site Scripting vulnerability in IceHrm

    OrtaCVSS 6,1İstismar yokEPSS %0

    icehrm · icehrm25 Oca 2024

  • CVE-2021-38822
    21İzleyin

    A Stored Cross Site Scripting vulnerability via Malicious File Upload exists in multiple pages of IceHrm 30.0.0.OS that allows for arbitrary

    OrtaCVSS 5,4İstismar yokEPSS %0

    icehrm · icehrm4 Eki 2021

  • CVE-2022-25015
    21İzleyin

    A stored cross-site scripting (XSS) vulnerability in Ice Hrm 30.0.0.OS allows attackers to steal cookies via a crafted payload inserted into

    OrtaCVSS 5,4İstismar yokEPSS %0

    icehrm · icehrm28 Şub 2022

  • CVE-2021-34243
    21İzleyin

    A stored cross site scripting (XSS) vulnerability was discovered in Ice Hrm 29.0.0.OS which allows attackers to execute arbitrary web script

    OrtaCVSS 5,4İstismar yokEPSS %0

    icehrm · icehrm22 Haz 2021