Websoft HCM Automation Software XSS

The vulnerability of Websoft HCM’s HR automation software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

PT-2022-5574

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to errors in filtering user code in the XML tag handler of the Websoft HCM software, which can be exploited by a remote attacker to execute arbitrary code...

PT-2022-7245

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to the lack of protection for the web page structure in Websoft HCM, allowing a remote attacker to perform cross-site scripting XSS attacks. Recommendations At the...

PT-2022-7243

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to the lack of measures to neutralize instructions in dynamically executed code in Websoft HCM, a software for automating HR processes. This could allow a remote...

PT-2022-7244

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to errors in file name or path management. It allows a remote attacker to gain read access to the file system. Recommendations At the moment, there is no information...

PT-2022-5581

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue exists due to inadequate protection of the web page structure in Websoft HCM, allowing a remote attacker to conduct a cross-site scripting XSS attack. Recommendations At the...

PT-2022-5594

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to incorrect code generation management in the Websoft HCM software. It allows a remote attacker to execute arbitrary code when forming an HTTP request. Recommendatio...

PT-2022-5580

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to an incorrect session timeout in the Websoft HCM software, which can be exploited by a remote attacker to reuse session credentials and access user information...

PT-2022-5576

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to a lack of protection for service data in the Websoft HCM software, which can be exploited by a remote attacker to obtain identifier information. This information c...

PT-2022-5584

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to a URL redirection vulnerability in the Websoft HCM software, which can allow a remote attacker to redirect users to an arbitrary URL. Recommendations At the moment...

PT-2022-5587

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue exists due to inadequate protection of the web page structure in Websoft HCM, allowing a remote attacker to conduct a cross-site scripting XSS attack. Recommendations At the...

PT-2022-5593

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to incorrect code generation management in the Websoft HCM software. It allows a remote attacker to execute arbitrary code when forming an HTTP request. Recommendatio...

PT-2022-5588

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue exists due to inadequate protection of the web page structure in Websoft HCM, allowing a remote attacker to conduct a cross-site scripting XSS attack. Recommendations At the...

PT-2022-5586

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to an unlimited upload of dangerous file types in the Websoft HCM software, which can be exploited by a remote attacker to execute arbitrary code. Recommendations At...

PT-2022-5582

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to errors in the session identifier generation mechanism. It may allow a remote attacker to elevate their privileges. Recommendations At the moment, there is no...

PT-2022-5591

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to a lack of protection for service data in the Websoft HCM software, which can be exploited by a remote attacker to gain unauthorized access to protected information...

PT-2022-5589

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to a lack of protection for internal data in the Websoft HCM software, which can be exploited by a remote attacker. By sending an incorrect value in a parameter, an...

PT-2022-5585

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to an uncontrolled resource consumption in the Websoft HCM software, which can be exploited by a remote attacker to cause a denial of service. Recommendations At the...

PT-2022-5592

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to incorrect code generation management in the Websoft HCM software. It allows a remote attacker to execute arbitrary code when forming an HTTP request. Recommendatio...

PT-2022-5579

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to the lack of the "Secure" attribute in session authorization cookies, which can be exploited by a remote attacker to intercept HTTP network traffic and obtain a...