UmanniCVEs & Vulnerabilities
2 CVEs affecting Umanni products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.
2 CVEs→ All vendors
Most Affected Products
human resources 2
CVE-2020-24008MEDIUM
Umanni RH 1.0 has a user enumeration vulnerability. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
26 Aug 2020
5.3
CVSS
CVE-2020-24007CRITICAL
Umanni RH 1.0 does not limit the number of authentication attempts. An unauthenticated user may exploit this vulnerability to launch a brute-force authentication attack against the Login page.
26 Aug 2020
9.8
CVSS
← PrevPage 1 / 1Next →