Lucene search
+L

42 matches found

NVD
NVD
added 2021/11/10 4:15 p.m.29 views

CVE-2021-42062

SAP ERP HCM Portugal does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area. Since the affected report only reads the payroll information, the attacker can neither modify any information nor cause availability impacts...

4.3CVSS0.00553EPSS
SaveExploits0References2
OSV
OSV
added 2021/11/10 4:15 p.m.5 views

CVE-2021-42062

SAP ERP HCM Portugal does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area. Since the affected report only reads the payroll information, the attacker can neither modify any information nor cause availability impacts...

4.3CVSS6.4AI score0.00553EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/11/10 4:15 p.m.6 views

CVE-2021-42062

SAP ERP HCM Portugal does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area. Since the affected report only reads the payroll information, the attacker can neither modify any information nor cause availability impacts...

4.3CVSS6.4AI score0.00553EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2021/11/10 3:30 p.m.30 views

CVE-2021-42062

SAP ERP HCM Portugal does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area. Since the affected report only reads the payroll information, the attacker can neither modify any information nor cause availability impacts...

4.9AI score0.00553EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/11/09 12:00 a.m.7 views

SAP ERP HCM 安全漏洞

SAP ERP HCM is an enterprise human resource management solution from SAP, Germany. A security vulnerability exists in SAP ERP HCM that stems from the fact that SAP ERP HCM Portugal does not perform the necessary authorization checks on reports that read employee payroll data for a specific region...

4.3CVSS6.1AI score0.00553EPSS
SaveExploits0References4
Krebs on Security
Krebs on Security
added 2021/07/01 6:56 p.m.56 views

Intuit to Share Payroll Data from 1.4M Small Businesses With Equifax

Financial services giant Intuit this week informed 1.4 million small businesses using its QuickBooks Online Payroll and Intuit Online Payroll products that their payroll information will be shared with big-three consumer credit bureau Equifax starting later this year unless customers opt out by t...

6.8AI score
SaveExploits0
CNVD
CNVD
added 2021/05/12 12:00 a.m.53 views

SAP Business One Information Disclosure Vulnerability (CNVD-2022-58480)

SAP Business One is a suite of enterprise management software from SAP, a German company. The software includes financial management, operations management and human resources management functions.SAP Business One Chef cookbook contains an information disclosure vulnerability that could be...

7.8CVSS1.9AI score0.00258EPSS
SaveExploits0References1
OSV
OSV
added 2021/05/11 3:15 p.m.6 views

CVE-2021-27613

Under certain conditions, SAP Business One Chef cookbook, version - 9.2, 9.3, 10.0, used to install SAP Business One, allows an attacker to exploit an insecure temporary folder for incoming & outgoing payroll data and to access information which would otherwise be restricted, which could lead to...

7.8CVSS5.8AI score0.00258EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/05/11 3:15 p.m.8 views

CVE-2021-27613

Under certain conditions, SAP Business One Chef cookbook, version - 9.2, 9.3, 10.0, used to install SAP Business One, allows an attacker to exploit an insecure temporary folder for incoming & outgoing payroll data and to access information which would otherwise be restricted, which could lead to...

7.8CVSS7.3AI score0.00258EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2021/05/11 3:15 p.m.20 views

Information disclosure

Under certain conditions, SAP Business One Chef cookbook, version - 9.2, 9.3, 10.0, used to install SAP Business One, allows an attacker to exploit an insecure temporary folder for incoming & outgoing payroll data and to access information which would otherwise be restricted, which could lead to...

4.6CVSS7.3AI score0.00258EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2021/05/11 12:00 a.m.11 views

SAP Business One 信息泄露漏洞

SAP Business One is a suite of enterprise management software from SAP, a German company. The software includes financial management, operations management and human resources management functions.SAP Business One Chef cookbook contains an information disclosure vulnerability that could be...

7.8CVSS5.6AI score0.00258EPSS
SaveExploits0References3
Krebs on Security
Krebs on Security
added 2021/05/10 2:25 p.m.29 views

Fintech Startup Offers $500 for Payroll Passwords

How much is your payroll data worth? Probably a lot more than you think. One financial startup thats targeting the gig worker market is offering up to $500 to anyone willing to hand over the payroll account username and password given to them by their employer, plus a regular payment for each mon...

7.3AI score
SaveExploits0
CNVD
CNVD
added 2019/08/01 12:00 a.m.7 views

SAP ERP HCM Remote Authorization Bypass Vulnerability

SAP ERP HCM is a set of enterprise human resource management solutions from SAP. A security vulnerability exists in SAP ERP HCM version 3.0, which stems from the program's failure to perform authorized checks on reports of payroll data. An attacker could exploit the vulnerability to gain access t...

4.9CVSS6.9AI score0.00792EPSS
SaveExploits0References1
OSV
OSV
added 2019/07/10 8:15 p.m.5 views

CVE-2019-0325

SAP ERP HCM SAPHRCES , version 3, does not perform necessary authorization checks for a report that reads payroll data of employees in a certain area. Due to this under certain conditions, the user that once had authorization to payroll data of an employee, which was later revoked, may retain...

4.2CVSS5.8AI score0.00792EPSS
SaveExploits0References3
Prion
Prion
added 2019/07/10 8:15 p.m.13 views

Authorization

SAP ERP HCM SAPHRCES , version 3, does not perform necessary authorization checks for a report that reads payroll data of employees in a certain area. Due to this under certain conditions, the user that once had authorization to payroll data of an employee, which was later revoked, may retain...

4.9CVSS4.5AI score0.00792EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2019/07/10 7:04 p.m.29 views

CVE-2019-0325

SAP ERP HCM SAPHRCES , version 3, does not perform necessary authorization checks for a report that reads payroll data of employees in a certain area. Due to this under certain conditions, the user that once had authorization to payroll data of an employee, which was later revoked, may retain...

4.5AI score0.00792EPSS
SaveExploits0References3
CVE
CVE
added 2019/07/10 7:04 p.m.147 views

CVE-2019-0325

CVE-2019-0325 affects SAP ERP HCM (SAP_HRCES) v3.0. The vulnerability arises from missing authorization checks on a payroll-data report, allowing a user who once had payroll data access to retain access after revocation under certain conditions. Impact stated: potential unauthorized reading of pa...

4.9CVSS4.5AI score0.00792EPSS
SaveExploits0References3Affected Software1
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.22 views

Kwik Pay Payroll 4.10.3 - (.mdb) Crash PoC

No description provided by source. Exploit Title: Kwik Pay Payroll .mdb Crash PoC Date: April 1, 2010 Version: 4.10.3 Tested on: Windows XP SP3 Cost: 100.00 AU Author: anonymous Site: http://www.setfreesecurity.com Usage: Run Script, Open the program File - Import Payroll Data Select From Data...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2010/04/02 12:00 a.m.22 views

Kwik Pay Payroll 4.10.3 Proof Of Concept

Exploit Title: Kwik Pay Payroll .mdb Crash PoC Date: April 1, 2010 Version: 4.10.3 Tested on: Windows XP SP3 Cost: 100.00 AU Author: chap0 Email: chap0x90atgmaildotcom Site: http://www.setfreesecurity.com Usage: Run Script, Open the program File - Import Payroll Data Select From Data Source...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2010/04/01 12:00 a.m.33 views

Kwik Pay Payroll 4.10.3 - '.mdb' Crash (PoC)

Exploit Title: Kwik Pay Payroll .mdb Crash PoC Date: April 1, 2010 Version: 4.10.3 Tested on: Windows XP SP3 Cost: 100.00 AU Author: anonymous Site: http://www.setfreesecurity.com Usage: Run Script, Open the program File - Import Payroll Data Select From Data Source Drop-Down: Kwik-Pay Payroll Da...

5.8AI score
SaveExploits0
Rows per page
Query Builder