CVE-2015-1035 - Vulnerability in HRIS software (HRMS product) - Reflective XSS

CVE-2015-1035 - Vulnerability in HRIS software (HRMS product) - Reflective XSS

  1. Reflective Cross Site Scripting in HRIS software (HRMS product)
  2. Details about vulnerability
  3. Version vulnerable
  4. Fixes
  5. CVE
  6. Acknowledgement
  7. Classification of this document
  8. Revision

You can report incidents via our official contact including e-mail, phone or use the Anonymous reporting form.

Search


CIRCL is accredited TI CIRCL is a FIRST member CIRCL is an OASIS member

Reflective Cross Site Scripting in HRIS software (HRMS product)

A vulnerability in the HRIS software (HRMS product) leads to a reflective cross site scripting.

Details about vulnerability

There is an improper neutralization of input during web page generation in the F_NavForm parameter.

Version vulnerable

Versions belows 4.17 are vulnerable. This vulnerability is fixed in version 4.17.

Fixes

We are not aware of any fixes. The vendor was contacted the 9th January 2015 for more information.

CVE

CVE-2015-1035

Acknowledgement

CIRCL would like to thank the reporter.

Classification of this document

TLP:WHITE information may be distributed without restriction, subject to copyright controls.

Revision

  • Version 1.0 - TLP:WHITE - First version (20150629)