← Back

Workforce Optimization

workforce_optimization

Vendor: Verint • 6 CVEs

CVEs (6)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-36396
1Verint
1Workforce Optimization
Nov 21, 2024
Jun 13, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Verint - CWE-434: Unrestricted Upload of File with Dangerous Type
CVE-2024-36395
1Verint
1Workforce Optimization
Nov 21, 2024
Jun 13, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Verint - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2021-36450
1Verint
1Workforce Optimization
Nov 21, 2024
Dec 15, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Verint Workforce Optimization (WFO) 15.2.8.10048 allows XSS via the control/my_notifications NEWUINAV parameter.
CVE-2021-41825
1Verint
1Workforce Optimization
Nov 21, 2024
Oct 8, 2021
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Verint Workforce Optimization (WFO) 15.2.5.1033 allows HTML injection via the /wfo/control/signin username parameter.
CVE-2020-23446
1Verint
1Workforce Optimization
Nov 21, 2024
Sep 22, 2020
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Verint Workforce Optimization suite 15.1 (15.1.0.37634) has Unauthenticated Information Disclosure via API
CVE-2020-13480
1Verint
1Workforce Optimization
Nov 21, 2024
Jun 22, 2020
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Verint Workforce Optimization (WFO) 15.2 allows HTML injection via the "send email" feature.