Lucene search

Ecop Security Vulnerabilities - 2023

cve

CVE-2023-4671

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Talent Software ECOP allows Command Line Execution through SQL Injection.This issue affects ECOP: before 32255.

9.8CVSS

9.8AI Score

0.001EPSS

2023-12-28 10:15 AM

cve

CVE-2023-4672

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Talent Software ECOP allows Reflected XSS.This issue affects ECOP: before 32255.

6.1CVSS

6.3AI Score

0.0005EPSS

2023-12-28 10:15 AM