Icehrm vulnerabilities

Products

• Icehrm 17

Newest

• gamonoid icehrm IceHRM before 36.0.0 Broken Access Control via Employee ID CVE-2026-91770 7.1 HighSeptember 15, 2026
• icehrm IceHRM UserReport Endpoint EmployeeAttendanceReport.php sql injection CVE-2026-15478 5.3 MediumJuly 12, 2026
• icehrm Cross-Site Scripting vulnerability in IceHrm CVE-2023-6282 5.4 MediumJanuary 25, 2024
• icehrm A Cross-Site Request Forgery (CSRF) in IceHrm 31.0.0.OS allows attackers to delete arbitrary... CVE-2022-26588 6.5 MediumApril 8, 2022
• icehrm A stored cross-site scripting (XSS) vulnerability in Ice Hrm 30.0.0.OS allows attackers to steal... CVE-2022-25015 5.4 MediumFebruary 28, 2022
• icehrm Ice Hrm 30.0.0.OS was discovered to contain a reflected cross-site scripting (XSS) vulnerability... CVE-2022-25014 6.1 MediumFebruary 28, 2022
• icehrm Ice Hrm 30.0.0.OS was discovered to contain multiple reflected cross-site scripting (XSS)... CVE-2022-25013 6.1 MediumFebruary 28, 2022
• icehrm The IceHrm 30.0.0 OS website was found vulnerable to Session Management Issue. A signout from an... CVE-2021-38823 9.8 CriticalOctober 4, 2021
• icehrm A Stored Cross Site Scripting vulnerability via Malicious File Upload exists in multiple pages of... CVE-2021-38822 5.4 MediumOctober 4, 2021
• icehrm A session fixation vulnerability was discovered in Ice Hrm 29.0.0 OS which allows an attacker to... CVE-2021-35046 6.1 MediumJune 22, 2021
• icehrm Cross site scripting (XSS) vulnerability in Ice Hrm 29.0.0.OS, allows attackers to execute... CVE-2021-35045 6.1 MediumJune 22, 2021
• icehrm A cross site request forgery (CSRF) vulnerability was discovered in Ice Hrm 29.0.0.OS which... CVE-2021-34244 8.8 HighJune 22, 2021
• icehrm A stored cross site scripting (XSS) vulnerability was discovered in Ice Hrm 29.0.0.OS which... CVE-2021-34243 5.4 MediumJune 22, 2021
• icehrm An exploitable SQL injection vulnerability exists in the Admin Reports functionality of Glacies... CVE-2020-6114 6.6 MediumJuly 10, 2020
• icehrm ICE Hrm 26.2.0 is vulnerable to CSRF that leads to password reset via service.php. CVE-2020-9270 8.8 HighFebruary 18, 2020
• icehrm ICE Hrm 26.2.0 is vulnerable to CSRF that leads to user creation via service.php. CVE-2020-9271 6.5 MediumFebruary 18, 2020
• icehrm IceHrm before 23.0.1.OS has a risky usage of a hashed password in a request. CVE-2018-12420 7.5 HighJune 14, 2018