Skip to content

Vendor

Talent Software vulnerabilities

8 published CVES affecting Talent Software, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
8
Critical
3
High
0
Medium
5
Low
0
Unscored
0
CISA KEV
0
Atom feed of Talent Software alerts

Products

Latest Talent Software CVEs

Newest publication first

  1. CVE-2025-12504 SQLi in Talent Software's UNIS

    Published
    CriticalCVSS 9.8 EPSS 0.59%

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Talent Software UNIS allows SQL Injection. This issue affects UNIS: before 42321.

  2. CVE-2025-6923 Reflected XSS in Talent Software's UNIS

    Published
    MediumCVSS 5.4 EPSS 0.20%

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Talent Software UNIS allows Reflected XSS. This issue affects UNIS: before 42957.

  3. CVE-2025-10876 XSS in Talent Software's e-Bap

    Published
    MediumCVSS 5.3 EPSS 0.34%

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Talent Software e-BAP Automation allows Cross-Site Scripting (XSS). This issue affects e-BAP Automation: from 1.8.96 before v.41815.

  4. CVE-2025-6924 Reflected XSS in Talent Software's e-BAP

    Published
    MediumCVSS 5.4 EPSS 0.20%

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Talent Software e-BAP Automation allows Reflected XSS. This issue affects e-BAP Automation: before 42957.

  5. CVE-2024-4657 Strored XSS in Talent Software's BAP Automation

    Published
    CriticalCVSS 9.3 EPSS 0.41%

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Talent Software BAP Automation allows Stored XSS. This issue affects BAP Automation: before 30840.

  6. CVE-2023-4672 XSS in Talent Soft's ECOP

    Published
    MediumCVSS 6.1 EPSS 0.31%

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Talent Software ECOP allows Reflected XSS. This issue affects ECOP: before 32255.

  7. CVE-2023-4671 SQLi in Talent Soft's ECOP

    Published
    CriticalCVSS 9.8 EPSS 0.65%

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Talent Software ECOP allows Command Line Execution through SQL Injection. This issue affects ECOP: before 32255.

  8. CVE-2023-0322 XSS in Talent Software UNIS

    Published
    MediumCVSS 6.1 EPSS 0.37%

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Talent Software UNIS allows Reflected XSS. This issue affects UNIS: before 28376.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.