The vulnerability of Websoft HCM’s automation software for HR processes stems from the lack of measures taken to protect the website structure. This allows attackers to carry out XSS attacks.

The vulnerability of Websoft HCM’s HR automation software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of Websoft HCM’s automation software for HR processes stems from the lack of measures taken to protect the website structure. This allows attackers to carry out XSS attacks.

The vulnerability of Websoft HCM’s HR automation software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of Websoft HCM’s automation software for HR processes stems from errors in filtering user code within the XML tag processor. This allows attackers to execute arbitrary code.

The vulnerability of Websoft HCM’s automation software for HR processes is related to errors in filtering user code within the XML tag handler. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of Websoft HCM’s automation software for HR processes stems from the lack of measures taken to protect the website structure. This allows attackers to carry out XSS attacks.

The vulnerability of Websoft HCM’s HR automation software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of Websoft HCM’s automation software for HR processes lies in the lack of procedures for neutralizing special elements in output data, which allows attackers to carry out attacks aimed at altering the query logic in the XQuery language against the database.

The vulnerability of Websoft HCM’s automation software for HR processes is related to deficiencies in the process of eliminating special elements from output data. Exploiting this vulnerability allows a malicious actor to remotely carry out an attack aimed at altering the query logic in the XQuer...

The vulnerability of Websoft HCM’s automation software for HR processes lies in its ability to download files of a dangerous type without limitation, allowing an attacker to execute arbitrary code.

The vulnerability of Websoft HCM’s automation software for HR processes is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of Websoft HCM’s automation software for HR processes lies in the lack of protection for operational data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Websoft HCM’s automation software for HR processes is related to the lack of protection for operational data. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information through specially crafted requests...

The vulnerability of Websoft HCM’s automation software for HR processes lies in the lack of a mechanism for generating error reports. This allows attackers to gain unauthorized access to protected information.

The vulnerability of Websoft HCM’s automation software for HR processes is related to deficiencies in the mechanism for generating error reports. Exploiting this vulnerability allows a malicious actor to inject incorrect values into parameters, thereby obtaining additional information in error...

The vulnerability of Websoft HCM’s automation software for HR processes lies in the lack of the “Secure” attribute being set in the authentication session cookies. This allows attackers to carry out attacks aimed at intercepting HTTP network traffic and obtaining the user’s session identifier.

The vulnerability of Websoft HCM’s automation software for HR processes stems from the lack of the “Secure” attribute being set in the authentication session cookies. Exploiting this vulnerability allows a remote attacker to conduct attacks aimed at intercepting HTTP network traffic and obtaining...

The vulnerability of Websoft HCM’s automation software for HR processes stems from improper code generation management, allowing attackers to execute arbitrary code.

The vulnerability of Websoft HCM’s automation software for HR processes is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code during the generation of HTTP requests...

The vulnerability of Websoft HCM’s automation software for HR processes lies in insufficient validation of input data, allowing attackers to execute arbitrary codes.

The vulnerability of Websoft HCM’s automation software for HR processes is related to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

PT-2022-5574

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to errors in filtering user code in the XML tag handler of the Websoft HCM software, which can be exploited by a remote attacker to execute arbitrary code...

PT-2022-7245

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to the lack of protection for the web page structure in Websoft HCM, allowing a remote attacker to perform cross-site scripting XSS attacks. Recommendations At the...

PT-2022-7243

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to the lack of measures to neutralize instructions in dynamically executed code in Websoft HCM, a software for automating HR processes. This could allow a remote...

PT-2022-7244

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to errors in file name or path management. It allows a remote attacker to gain read access to the file system. Recommendations At the moment, there is no information...

PT-2022-5579

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to the lack of the "Secure" attribute in session authorization cookies, which can be exploited by a remote attacker to intercept HTTP network traffic and obtain a...

PT-2022-5593

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to incorrect code generation management in the Websoft HCM software. It allows a remote attacker to execute arbitrary code when forming an HTTP request. Recommendatio...

PT-2022-5575

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to weaknesses in the error reporting mechanism of the software. It allows a remote attacker to exploit the vulnerability by passing an incorrect value in a parameter,...

PT-2022-5577

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue exists due to inadequate protection of the web page structure in the Websoft HCM software, allowing a remote attacker to conduct a cross-site scripting XSS attack. Recommendatio...

PT-2022-5580

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to an incorrect session timeout in the Websoft HCM software, which can be exploited by a remote attacker to reuse session credentials and access user information...