Approved changes feed: RSS · Atom
cpe:2.3:a:cegid:meta4_hr:819.001.022:*:*:*:*:*:*:*part: a version: 819.001.022 update: *
| Vendor | Cegid (d63163d7-e9bc-577e-b2c7-d870fb8e290c) |
|---|---|
| Product | Meta4 Hr (f5ab77a3-4292-50d0-a216-5b11c2f9acbd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-2636 |
vulnerable | 2026-06-08 06:33:31.673945 |
Multiple vulnerabilities on Meta4 HR from Cegid
CRITICAL (9)
An Unrestricted Upload of File vulnerability has been found on Cegid Meta4 HR, that allows an attacker to upload malicios files to the server via '/config/espanol/update_password.jsp' file. Modifying the 'M4_NEW_PASSWORD' parameter, an attacker could store a malicious JSP file inside the file directory, to be executed the the file is loaded in the application.
Published: 2024-03-19T12:12:13.392Z
Updated: 2024-08-13T13:20:44.141Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2635 |
vulnerable | 2026-06-08 06:33:31.673378 |
Multiple vulnerabilities on Meta4 HR from Cegid
HIGH (7.3)
The configuration pages available are not intended to be placed on an Internet facing web server, as they expose file paths to the client, who can be an attacker. Instead of rewriting these pages to avoid this vulnerability, they will be dismissed from future releases of Cegid Meta4 HR, as they do not offer product functionality
Published: 2024-03-19T12:09:48.232Z
Updated: 2024-08-21T17:46:06.799Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2632 |
vulnerable | 2026-06-08 06:33:31.671371 |
Information Exposure Vulnerability on Meta4 HR
HIGH (7.5)
A Information Exposure Vulnerability has been found on Meta4 HR. This vulnerability allows an attacker to obtain a lot of information about the application such as the variables set in the process, the Tomcat versions, library versions and underlying operation system via HTTP GET '/sitetest/english/dumpenv.jsp'.
Published: 2024-03-19T11:58:39.831Z
Updated: 2024-08-01T19:18:47.971Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.