Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Leaderboard
CNA Report Cards
Vendor Directory
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0
Badge Builder

Platform

My Vulnerabilities
Insights
Notifications
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Careers
Contact
Book a demo

Get Started

Sign up
Log in

Legal

Security
Privacy
Terms

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in Start free

Home
Vendors
Oretnom23
Human Resource Management System

oretnom23 human resource management system Vulnerabilities: CVEs, CISA KEV & Security Advisories

29 CVEs

OR

oretnom23 human resource management system Vulnerabilities

CVE security advisories and vulnerability history for human resource management system by oretnom23.

29

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

11

Public exploits

PoC or exploit code

7.0

Avg CVSS

2022–2025

Last updated July 29, 2025

Overview

oretnom23 human resource management system has 29 published CVE records since 2022, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 11 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting oretnom23 human resource management system, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of oretnom23 human resource management system's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical5

High7

Medium17

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of oretnom23 human resource management system's CVEs are currently listed in CISA's KEV catalog.

Public exploits

11

11 of oretnom23 human resource management system's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every oretnom23 human resource management system version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

1.0 <= v <= 1.025 CVEs

Find a version

29 CVEs

Sort

Reflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management System
CVE-2025-40686CWE-79
Medium · CVSS 4.8
EPSS 0.2% (7th pct)2025-07-29
Reflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management System
CVE-2025-40685CWE-79
Medium · CVSS 4.8
EPSS 0.2% (7th pct)2025-07-29
Reflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management System
CVE-2025-40684CWE-79
Medium · CVSS 4.8
EPSS 0.2% (7th pct)2025-07-29
Reflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management System
CVE-2025-40683CWE-79
Medium · CVSS 4.8
EPSS 0.2% (6th pct)2025-07-29
SQL injection vulnerability in Human Resource Management System
CVE-2025-40682CWE-89
High · CVSS 8.7
EPSS 0.3% (22th pct)2025-07-29
Critical vulnerability · 2024-05-30
CVE-2024-35469
Public exploit
CWE-89
Critical · CVSS 9.8
EPSS 0.6% (48th pct)2024-05-30
Medium vulnerability · 2024-05-30
CVE-2024-35468
Public exploit
CWE-89
Medium · CVSS 5.4
EPSS 0.4% (28th pct)2024-05-30
High vulnerability · 2024-05-13
CVE-2024-34221
Patch
CWE-276
High · CVSS 8.8
EPSS 0.8% (55th pct)2024-05-13
Medium vulnerability · 2024-05-13
CVE-2024-34222
Public exploit
CWE-89
Medium · CVSS 5.9
EPSS 0.4% (32th pct)2024-05-13
Medium vulnerability · 2024-05-13
CVE-2024-34223
Public exploit
CWE-276
Medium · CVSS 4.3
EPSS 0.5% (39th pct)2024-05-13
High vulnerability · 2024-05-09
CVE-2024-34220CWE-89
High · CVSS 7.5
EPSS 0.8% (53th pct)2024-05-09
Critical vulnerability · 2023-06-23
CVE-2023-3391
Public exploit
CWE-89
Critical · CVSS 9.8
EPSS 0.7% (52th pct)2023-06-23
Medium vulnerability · 2022-12-03
CVE-2022-4279CWE-707
Medium · CVSS 6.1
EPSS 0.5% (42th pct)2022-12-03
SourceCodester Human Resource Management System employeeadd.php sql injection
CVE-2022-4278CWE-707
High · CVSS 7.2
EPSS 0.7% (50th pct)2022-12-03
SourceCodester Human Resource Management System Content-Type employee.php unrestricted upload
CVE-2022-4273
Public exploit
CWE-266
Critical · CVSS 9.8
EPSS 0.8% (53th pct)2022-12-03
Medium vulnerability · 2022-11-25
CVE-2022-45218
Medium · CVSS 6.1
EPSS 0.4% (37th pct)2022-11-25
Critical vulnerability · 2022-11-16
CVE-2022-43262
Critical · CVSS 9.8
EPSS 0.8% (53th pct)2022-11-16
High vulnerability · 2022-11-07
CVE-2022-43318
High · CVSS 8.8
EPSS 0.8% (55th pct)2022-11-07
Medium vulnerability · 2022-11-07
CVE-2022-43317
Medium · CVSS 6.1
EPSS 0.5% (39th pct)2022-11-07
Medium vulnerability · 2022-10-14
CVE-2022-3502
Public exploit
CWE-707
Medium · CVSS 5.4
EPSS 0.5% (40th pct)2022-10-14
Medium vulnerability · 2022-10-14
CVE-2022-3497CWE-707
Medium · CVSS 5.4
EPSS 0.4% (28th pct)2022-10-14
SourceCodester Human Resource Management System Admin Panel employeeadd.php access control
CVE-2022-3496CWE-266
High · CVSS 8.8
EPSS 0.4% (36th pct)2022-10-14
Medium vulnerability · 2022-10-13
CVE-2022-3493CWE-707
Medium · CVSS 5.4
EPSS 0.4% (28th pct)2022-10-13
SourceCodester Human Resource Management System Profile Photo os command injection
CVE-2022-3492CWE-707
High · CVSS 8.8
EPSS 1.0% (59th pct)2022-10-13
Medium vulnerability · 2022-10-12
CVE-2022-3473
Public exploit
CWE-707
Medium · CVSS 6.5
EPSS 0.6% (45th pct)2022-10-12
SourceCodester Human Resource Management System city.php sql injection
CVE-2022-3472
Public exploit
CWE-707
Medium · CVSS 6.3
EPSS 0.5% (41th pct)2022-10-12
SourceCodester Human Resource Management System city.php sql injection
CVE-2022-3471
Public exploit
CWE-707
Medium · CVSS 6.3
EPSS 0.5% (41th pct)2022-10-12
Medium vulnerability · 2022-10-12
CVE-2022-3470
Public exploit
CWE-707
Medium · CVSS 6.5
EPSS 0.5% (42th pct)2022-10-12
Critical vulnerability · 2022-10-12
CVE-2022-3458CWE-266
Critical · CVSS 9.8
EPSS 0.4% (36th pct)2022-10-12

Common weakness types

The CWE weakness categories most often found in oretnom23 human resource management system CVEs. Follow any weakness for its full explanation.

CWE-707Improper Neutralization10 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')6 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4 CVEs
CWE-266Incorrect Privilege Assignment3 CVEs
CWE-276Incorrect Default Permissions2 CVEs

Disclosure activity by year

How many oretnom23 human resource management system CVEs were published each year.

2022

17

2023

1

2024

6

2025

5

Other oretnom23 products

Browse vulnerabilities for other products by oretnom23.

online computer and laptop store32 CVEs computer laboratory management system30 CVEs online eyewear shop29 CVEs online food ordering system29 CVEs clinic's patient management system27 CVEs lost and found information system27 CVEs customer support system19 CVEs food ordering management system17 CVEs

All oretnom23 vulnerabilities

Frequently asked questions

Common questions about oretnom23 human resource management system vulnerabilities.

How many CVEs does oretnom23 human resource management system have?: oretnom23 human resource management system has 29 published CVE records since 2022.
How many oretnom23 human resource management system CVEs are in CISA KEV?: None of oretnom23 human resource management system's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for oretnom23 human resource management system vulnerabilities?: Yes — 11 of oretnom23 human resource management system's CVEs have a known public exploit.
Which versions of oretnom23 human resource management system are affected?: 1 distinct oretnom23 human resource management system version is named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in oretnom23 human resource management system CVEs?: oretnom23 human resource management system's CVEs most often map to these CWE weakness types: CWE-707 (Improper Neutralization), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-266 (Incorrect Privilege Assignment).
How many critical oretnom23 human resource management system vulnerabilities are there?: oretnom23 human resource management system has 5 critical and 7 high-severity CVEs.
What is the average severity of oretnom23 human resource management system CVEs?: The average CVSS base score across oretnom23 human resource management system's scored CVEs is 7.0.

References

All oretnom23 vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track oretnom23 human resource management system vulnerabilities

Monitor new oretnom23 human resource management system vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References