Vulnerabilities (CVE)

Filtered by vendor Hrworks Subscribe
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-16417 1 Hrworks 1 Hrworks 2024-11-21 3.5 LOW 5.4 MEDIUM
HRworks FLOW 3.36.9 allows XSS via the purpose of a travel-expense report.
CVE-2019-16416 1 Hrworks 1 Hrworks 2024-11-21 3.5 LOW 5.4 MEDIUM
HRworks 3.36.9 allows XSS via the purpose of a travel-expense report.
CVE-2019-11559 1 Hrworks 1 Hrworks 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
A reflected Cross-site scripting (XSS) vulnerability in HRworks V 1.16.1 allows remote attackers to inject arbitrary web script or HTML via the URL parameter to the Login component.