Workforceroi
8 CVEs tracked since 2002. Since Jun 2002, none of them reached CISA KEV.
Workforceroi CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2002-06 | 8 | 0 |
Products
The products that kept showing up in Workforceroi's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 8 most recently published vulnerabilities affecting Workforceroi.
- CVE-2002-0583WorkforceROI Xpede 4.1 uses a small random namespace (5 alphanumeric characters) for temporary expense claim reports in the /reports/temp directory, which allows remote attackers to read the report...5.0
- CVE-2002-0487Intellisol Xpede 4.1 stores passwords in plaintext in a Javascript "session timeout" re-authentication capability, which could allow local users with access to gain privileges of other Xpede users ...4.6
- CVE-2002-0581WorkforceROI Xpede 4.1 allows remote attackers to execute arbitrary SQL commands and read, modify, or steal credentials from the database via the Qry parameter in the sprc.asp script.7.5
- CVE-2002-0582WorkforceROI Xpede 4.1 stores temporary expense claim reports in a world-readable and indexable /reports/temp directory, which allows remote attackers to read the reports by accessing the directory.5.0
- CVE-2002-0579WorkforceROI Xpede 4.1 allows remote attackers to gain privileges as an Xpede administrator via a direct HTTP request to the /admin/adminproc.asp script, which does not prompt for a password.7.5
- CVE-2002-0486Intellisol Xpede 4.1 uses weak encryption to store authentication information in cookies, which could allow local users with access to the cookies to gain privileges.7.2
- CVE-2002-0584WorkforceROI Xpede 4.1 allows remote attackers to read user timesheets by modifying the TSN ID parameter to the ts_app_process.asp script, which is easily guessable because it is incremented by 1 f...5.0
- CVE-2002-0580WorkforceROI Xpede 4.1 allows remote attackers to obtain the database username via a request to datasource.asp, which leaks the username in a form and allows the attacker to more easily conduct bru...7.5
The record
- Peak rank
- #6 in Jun 2002
- Busiest month shown
- Jun 2002, 8 CVEs
- Months with a KEV entry
- 0 since Jun 2002
- Monthly snapshots
- 1 since 2002