Hrworks — known CVE vulnerabilities

Every CVE whose affected-product data names Hrworks, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2019-11559 — CVSS 6.1 (medium): A reflected Cross-site scripting (XSS) vulnerability in HRworks V 1.16.1 allows remote attackers to inject arbitrary web script or HTML via…
• CVE-2019-16416 — CVSS 5.4 (medium): HRworks 3.36.9 allows XSS via the purpose of a travel-expense report.
• CVE-2019-16417 — CVSS 5.4 (medium): HRworks FLOW 3.36.9 allows XSS via the purpose of a travel-expense report.