Cegid vulnerabilities
We track 3 vulnerabilities in Cegid products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 19, 2024.
Latest Cegid vulnerabilities
- 9.0 Critical severity
Meta4 HR: Unrestricted Upload of File with Dangerous Type
An Unrestricted Upload of File vulnerability has been found on Cegid Meta4 HR, that allows an attacker to upload malicios files to the server via '/config/espanol/update_password.jsp' file. Modifying the 'M4_NEW_PASSWORD' parameter, an attacker could store a m
- 7.3 High severity
Meta4 HR: Execution After Redirect (EAR)
The configuration pages available are not intended to be placed on an Internet facing web server, as they expose file paths to the client, who can be an attacker. Instead of rewriting these pages to avoid this vulnerability, they will be dismissed from future
- 7.5 High severity
Meta4 HR: Exposure of Sensitive Information to an Unauthorized Actor
A Information Exposure Vulnerability has been found on Meta4 HR. This vulnerability allows an attacker to obtain a lot of information about the application such as the variables set in the process, the Tomcat versions, library versions and underlying operation