Umanni Human Resources
2 CVEs affecting Umanni Human Resources. Latest disclosed: 2020-08-26. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-24007 | Critical | 9.8 | 2020-08-26 | Umanni RH 1.0 does not limit the number of authentication attempts. An unauthenticated user may exploit this vulnerability to launch a brute-force authenticati… |
CVE-2020-24008 | Medium | 5.3 | 2020-08-26 | Umanni RH 1.0 has a user enumeration vulnerability. This issue occurs during password recovery, where a difference in messages could allow an attacker to deter… |