Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2024-36656

In MintHCM 4.0.3, a registered user can execute arbitrary JavaScript code and achieve a reflected Cross-site Scripting (XSS) attack.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Minthcm
Products
Minthcm
CVE-2021-25839

A weak password requirement vulnerability exists in the Create New User function of MintHCM RELEASE 3.0.8, which could lead an attacker to easier password brute-forcing.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Minthcm
Products
Minthcm
CVE-2021-25838

The Import function in MintHCM RELEASE 3.0.8 allows an attacker to execute a cross-site scripting (XSS) payload in file-upload.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Minthcm
Products
Minthcm