CVE-2024-7269

NVD Published Date: August 28, 2024 at 11:15 AM

NVD Last Modified: August 28, 2024 at 12:57 PM

Download Patch

Vulnerability ID

CVE-2024-7269

Severity

None

Severity Score

None

Summary

Improper Neutralization of Input During Web Page Generation vulnerability in "Update of Personal Details" form in ConnX ESP HR Management allows Stored XSS attack. An attacker might inject a script to be run in user's browser. After multiple attempts to contact the vendor we did not receive any answer. The finder provided the information that this issue affects ESP HR Management versions before 6.6.

References

https://cert.pl/en/posts/2024/08/CVE-2024-7269/

https://cert.pl/posts/2024/08/CVE-2024-7269/

https://connx.com.au/

Mitigation and Patches

Exploits

Metasploit Payload

Vector

None

CWE ID

None

Recent Publish

CVE-2024-7447

CVE-2024-6450

CVE-2024-6449

Security Update for Microsoft SharePoint Enterprise Server 2016 (KB5002559) farm-deployment

Security Update for Microsoft SharePoint Server 2019 Core (KB5002562) farm-deployment

Security Update for Microsoft SharePoint Server Subscription Edition (KB5002564) farm-deployment

See SecOps Solution
in action

Schedule Demo

Agentless security for your infrastructure and applications - to build faster, more securely and in a fraction of the operational cost of other solutions

CVE-2024-7269

Recent Publish

See SecOps Solution
in action

Products

Compare

Company

Resources

Try It

CVE-2024-7269

Recent Publish

See SecOps Solutionin action

Products

Compare

Company

Resources

Try It

See SecOps Solution
in action