Known Vulnerabilities for products from Icehrm
Listed below are 15 of the newest known vulnerabilities associated with the vendor "Icehrm".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-15478 json | Not Provided | 2026-07-12 | 2026-07-13 | |
| CVE-2023-6282 json | 6.1 - MEDIUM | 2024-01-25 | 2024-01-31 | |
| CVE-2022-26588 json | A Cross-Site Request Forgery (CSRF) in IceHrm 31.0.0.OS allows attackers to delete arbitrary users or achieve account takeove... | 6.5 - MEDIUM | 2022-04-08 | 2023-11-07 |
| CVE-2022-25015 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 5.4 - MEDIUM | 2022-02-28 | 2022-03-09 |
| CVE-2022-25014 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 6.1 - MEDIUM | 2022-02-28 | 2022-03-09 |
| CVE-2022-25013 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 6.1 - MEDIUM | 2022-02-28 | 2022-03-09 |
| CVE-2021-38823 json | The IceHrm 30.0.0 OS website was found vulnerable to Session Management Issue. A signout from an admin account does not inval... | 9.8 - CRITICAL | 2021-10-04 | 2021-10-12 |
| CVE-2021-38822 json | A Stored Cross Site Scripting vulnerability via Malicious File Upload exists in multiple pages of IceHrm 30.0.0.OS that allow... | 5.4 - MEDIUM | 2021-10-04 | 2021-10-08 |
| CVE-2021-35046 json | A session fixation vulnerability was discovered in Ice Hrm 29.0.0 OS which allows an attacker to hijack a valid user session ... | 6.1 - MEDIUM | 2021-06-22 | 2023-11-07 |
| CVE-2021-35045 json | Cross site scripting (XSS) vulnerability in Ice Hrm 29.0.0.OS, allows attackers to execute arbitrary code via the parameters ... | 6.1 - MEDIUM | 2021-06-22 | 2023-11-07 |
| CVE-2021-34244 json | A cross site request forgery (CSRF) vulnerability was discovered in Ice Hrm 29.0.0.OS which allows attackers to create new ad... | 8.8 - HIGH | 2021-06-22 | 2021-06-25 |
| CVE-2021-34243 json | A stored cross site scripting (XSS) vulnerability was discovered in Ice Hrm 29.0.0.OS which allows attackers to execute arbit... | 5.4 - MEDIUM | 2021-06-22 | 2021-06-25 |
| CVE-2020-9271 json | ICE Hrm 26.2.0 is vulnerable to CSRF that leads to user creation via service.php. | 6.5 - MEDIUM | 2020-02-18 | 2020-02-19 |
| CVE-2020-9270 json | ICE Hrm 26.2.0 is vulnerable to CSRF that leads to password reset via service.php. | 8.8 - HIGH | 2020-02-18 | 2020-02-19 |
| CVE-2020-6114 json | An exploitable SQL injection vulnerability exists in the Admin Reports functionality of Glacies IceHRM v26.6.0.OS (Commit bb2... | 7.2 - HIGH | 2020-07-10 | 2022-05-12 |
| CVE-2018-12420 json | IceHrm before 23.0.1.OS has a risky usage of a hashed password in a request. | 7.5 - HIGH | 2018-06-14 | 2018-08-09 |
Known software with vulnerabilities from Icehrm
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Icehrm | Icehrm | 13.1.os |