PatchTheCVEworkforce management vulnerabilities and fixes
Recent CVEs affecting workforce management, with upgrade or downgrade steps. 2 tracked.
Also searched as: workforcemanagement.
workforce management has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2021-12-15. Highest priority: CVE-2021-38618 (score 47/100).
- CVE-2021-26787 MEDIUM 6.1 DOWNGRADE A cross site scripting (XSS) vulnerability in Genesys Workforce Management 8.5.214.20 can occur (during record
- CVE-2021-38618 HIGH 7.4 DOWNGRADE In GFOS Workforce Management 4.8.272.1, the login page of application is prone to authentication bypass, allow
FAQ
How do I fix workforce management vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is workforce management being exploited right now?
None of the tracked workforce management CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which workforce management CVE should I patch first?
CVE-2021-38618 currently ranks highest (47/100): In GFOS Workforce Management 4.8.272.1, the login page of application is prone to authentication bypass, allow.