Vendor archive

openbaraza CVEs

Beta · best-effort

2 CVEs tagged to vendor openbaraza — 0 Critical, 0 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2021-38619

Published Aug 13, 2021

openBaraza HCM 3.1.6 does not properly neutralize user-controllable input: an unauthenticated remote attacker can conduct a stored cross-site scripting (XSS) attack against an adm…

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2021-38583

Published Aug 13, 2021

openBaraza HCM 3.1.6 does not properly neutralize user-controllable input, which allows reflected cross-site scripting (XSS) on multiple pages: hr/subscription.jsp and hr/applicat…

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1