CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-1931

The user login page in Visibility Software Cyber Recruiter before 8.1.00 generates different responses for invalid password-retrieval attempts depending on which data elements are incorrect, which might allow remote attackers to obtain account-related information via a series of requests.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 48.3%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2014-1931

Visibility Software » Cyber Recruiter » Version: Any

cpe:2.3:a:visibility_software:cyber_recruiter:*
Visibility Software » Cyber Recruiter » Version: 6.2

cpe:2.3:a:visibility_software:cyber_recruiter:6.2
Visibility Software » Cyber Recruiter » Version: 6.4

cpe:2.3:a:visibility_software:cyber_recruiter:6.4
Visibility Software » Cyber Recruiter » Version: 6.6

cpe:2.3:a:visibility_software:cyber_recruiter:6.6
Visibility Software » Cyber Recruiter » Version: 6.8

cpe:2.3:a:visibility_software:cyber_recruiter:6.8
Visibility Software » Cyber Recruiter » Version: 7.0

cpe:2.3:a:visibility_software:cyber_recruiter:7.0
Visibility Software » Cyber Recruiter » Version: 7.2

cpe:2.3:a:visibility_software:cyber_recruiter:7.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-1931

Products

Pricing

Contact Us