Skip to contentIcehrm Icehrm vulnerabilities
- gamonoid icehrmIceHRM before 36.0.0 Broken Access Control via Employee IDCVE-2026-917707.1 High
- icehrmIceHRM UserReport Endpoint EmployeeAttendanceReport.php sql injectionCVE-2026-154785.3 Medium
- icehrmCross-Site Scripting vulnerability in IceHrmCVE-2023-62825.4 Medium
- icehrmA Cross-Site Request Forgery (CSRF) in IceHrm 31.0.0.OS allows attackers to delete arbitrary...CVE-2022-265886.5 Medium
- icehrmA stored cross-site scripting (XSS) vulnerability in Ice Hrm 30.0.0.OS allows attackers to steal...CVE-2022-250155.4 Medium
- icehrmIce Hrm 30.0.0.OS was discovered to contain a reflected cross-site scripting (XSS) vulnerability...CVE-2022-250146.1 Medium
- icehrmIce Hrm 30.0.0.OS was discovered to contain multiple reflected cross-site scripting (XSS)...CVE-2022-250136.1 Medium
- icehrmThe IceHrm 30.0.0 OS website was found vulnerable to Session Management Issue. A signout from an...CVE-2021-388239.8 Critical
- icehrmA Stored Cross Site Scripting vulnerability via Malicious File Upload exists in multiple pages of...CVE-2021-388225.4 Medium
- icehrmA session fixation vulnerability was discovered in Ice Hrm 29.0.0 OS which allows an attacker to...CVE-2021-350466.1 Medium
- icehrmCross site scripting (XSS) vulnerability in Ice Hrm 29.0.0.OS, allows attackers to execute...CVE-2021-350456.1 Medium
- icehrmA cross site request forgery (CSRF) vulnerability was discovered in Ice Hrm 29.0.0.OS which...CVE-2021-342448.8 High
- icehrmA stored cross site scripting (XSS) vulnerability was discovered in Ice Hrm 29.0.0.OS which...CVE-2021-342435.4 Medium
- icehrmAn exploitable SQL injection vulnerability exists in the Admin Reports functionality of Glacies...CVE-2020-61146.6 Medium
- icehrmICE Hrm 26.2.0 is vulnerable to CSRF that leads to password reset via service.php.CVE-2020-92708.8 High
- icehrmICE Hrm 26.2.0 is vulnerable to CSRF that leads to user creation via service.php.CVE-2020-92716.5 Medium
- icehrmIceHrm before 23.0.1.OS has a risky usage of a hashed password in a request.CVE-2018-124207.5 High