The vulnerability of Websoft HCM’s automation solutions for HR processes stems from improper segmentation of access control. This allows a malicious user to create a new user account within the system.

The vulnerability of Websoft HCM’s automation solutions for HR processes is related to improper separation of access control. Exploiting this vulnerability allows a malicious actor to create a new user within the system...

PT-2023-7606 · Websoft · Websoft Hcm

Name of the Vulnerable Software and Affected Versions: Websoft HCM affected versions not specified Description: The issue is related to improper access control in the Websoft HCM system, which can be exploited by a remote attacker to create a new user in the system. Recommendations: At the moment...

CVE-2023-49577

The SAP HCM SMART PAYE solution - versions S4HCMCIE 100, SAPHRCIE 600, SAPHRCIE 604, SAPHRCIE 608, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. After successful exploitation, an attacker can cause limited impact on confidentiality and...

CVE-2023-49577

The SAP HCM SMART PAYE solution - versions S4HCMCIE 100, SAPHRCIE 600, SAPHRCIE 604, SAPHRCIE 608, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. After successful exploitation, an attacker can cause limited impact on confidentiality and...

Cross site scripting

The SAP HCM SMART PAYE solution - versions S4HCMCIE 100, SAPHRCIE 600, SAPHRCIE 604, SAPHRCIE 608, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. After successful exploitation, an attacker can cause limited impact on confidentiality and...

CVE-2023-49577

CVE-2023-49577 affects SAP HCM (SMART PAYE solution) versions S4HCMCIE 100, SAP_HRCIE 600, 604, 608. Root cause is insufficient encoding of user-controlled inputs, enabling cross-site scripting (XSS). Impact is limited to confidentiality and integrity of the application; no availability impact. E...

CVE-2023-49577 Cross-Site Scripting (XSS) vulnerability in the SAP HCM (SMART PAYE solution)

The SAP HCM SMART PAYE solution - versions S4HCMCIE 100, SAPHRCIE 600, SAPHRCIE 604, SAPHRCIE 608, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. After successful exploitation, an attacker can cause limited impact on confidentiality and...

PT-2023-8459 · Websoft · Websoft Hcm

Name of the Vulnerable Software and Affected Versions: Websoft HCM affected versions not specified Description: The issue is related to a path traversal vulnerability in the Websoft HCM software, which can be exploited by a remote attacker to perform arbitrary file operations outside the intended...

SQL Injection Vulnerability in Macroview HCM HRMS (CNVD-2023-63835)

Beijing Hongjing Century Software Co., Ltd. is a professional e-HR vendor in China. A SQL injection vulnerability exists in the Macroview HCM Human Resource Management System, which can be exploited by attackers to obtain sensitive information from the database...

The vulnerability of the Administer Workforce component of the PeopleSoft Enterprise HCM Human Resources platform allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the Administer Workforce component of the PeopleSoft Enterprise HCM Human Resources platform exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2023-21992

Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft component: Administer Workforce. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2023-21992

Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft component: Administer Workforce. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

Code injection

Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft component: Administer Workforce. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2023-21992

CVE-2023-21992 affects Oracle PeopleSoft Enterprise HCM Human Resources, component Administer Workforce, in version 9.2. The vulnerability arises from insufficient input validation, enabling a low-privileged, network-accessible attacker (via HTTP) to perform unauthorized update/insert/delete and ...

PT-2023-2488 · Oracle · Peoplesoft Enterprise Hcm Human Resources

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise HCM Human Resources version 9.2 Description: The issue is related to insufficient input validation in the Administer Workforce component. It allows a low-privileged attacker with network access via HTTP to compromise...

SQL Injection Vulnerability in Macroview HCM Human Resource Management System

Macroview HCM Human Resource Management System is a human resource management software. A SQL injection vulnerability exists in Macroview HCM Human Resource Management System, which can be exploited by attackers to obtain sensitive information from the database...

CVE-2023-1903

SAP HCM Fiori App My Forms Fiori 2.0 - version 605, does not perform necessary authorization checks for an authenticated user exposing the restricted header data...

CVE-2023-1903

SAP HCM Fiori App My Forms Fiori 2.0 - version 605, does not perform necessary authorization checks for an authenticated user exposing the restricted header data...

Authorization

SAP HCM Fiori App My Forms Fiori 2.0 - version 605, does not perform necessary authorization checks for an authenticated user exposing the restricted header data...

CVE-2023-1903 Missing Authorization check in SAP HCM Fiori App My Forms (Fiori 2.0)

SAP HCM Fiori App My Forms Fiori 2.0 - version 605, does not perform necessary authorization checks for an authenticated user exposing the restricted header data...