Vulnerabilities
3 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2019-16417 +1 in the same advisory: …16416 | HRworks FLOW 3.36.9 allows XSS via the purpose of a travel-expense report. HRworks FLOW 3.36.9 allows XSS via the purpose of a travel-expense report. NVD description · AI analysis pending | 5.4 | <1% | PoC |
| — | |
| CVE-2019-11559 | A reflected Cross-site scripting (XSS) vulnerability in HRworks V 1.16.1 allows remote attackers to inject arbitrary web script or HTML via the URL parameter to A reflected Cross-site scripting (XSS) vulnerability in HRworks V 1.16.1 allows remote attackers to inject arbitrary web script or HTML via the URL parameter to the Login component. NVD description · AI analysis pending | 6.1 | 1% | PoC |
| — |