Umanni

umanni

2 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Human Resources

human_resources

2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-24008 1Umanni 1Human Resources Jun 17, 2026 Aug 26, 2020 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Umanni RH 1.0 has a user enumeration vulnerability. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force atta...Show more Umanni RH 1.0 has a user enumeration vulnerability. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.Show less
CVE-2020-24007 1Umanni 1Human Resources Jun 17, 2026 Aug 26, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Umanni RH 1.0 does not limit the number of authentication attempts. An unauthenticated user may exploit this vulnerability to launch a brute-force authentication attack against the Login page.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2020-24008

1Umanni

1Human Resources

Jun 17, 2026

Aug 26, 2020

N/A· v4

5.3 MEDIUM· v3

5.0 MEDIUM· v2

Umanni RH 1.0 has a user enumeration vulnerability. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force atta...Show more

CVE-2020-24007

1Umanni

1Human Resources

Jun 17, 2026

Aug 26, 2020

N/A· v4

9.8 CRITICAL· v3

7.5 HIGH· v2

Umanni RH 1.0 does not limit the number of authentication attempts. An unauthenticated user may exploit this vulnerability to launch a brute-force authentication attack against the Login page.