Talent Software vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Talent Software products: 4 record(s), with severity, exploitation and fixes.

e-BAP Automation 2 UNIS 2

Exploited only (KEV) →

CVE-2025-6924 Medium · 5.4 CWE-79 Dec 9, 2025

Reflected XSS in Talent Software's e-BAP

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Talent Software e-BAP Automation allows Reflected XSS. This issue affects e-BAP Automation: before 42957.

CVE-2025-6923 Medium · 5.4 CWE-79 Dec 9, 2025

Reflected XSS in Talent Software's UNIS

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Talent Software UNIS allows Reflected XSS. This issue affects UNIS: before 42957.

CVE-2025-12504 Critical · 9.8 CWE-89 Dec 9, 2025

SQLi in Talent Software's UNIS

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Talent Software UNIS allows SQL Injection. This issue affects UNIS: before 42321.

CVE-2025-10876 Medium · 5.3 CWE-79 Dec 9, 2025

XSS in Talent Software's e-Bap

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Talent Software e-BAP Automation allows Cross-Site Scripting (XSS). This issue affects e-BAP Automation: from 1.8.96 before v.41815.