CVE-2014-1931

MEDIUM 4.3CVE-2014-1931 · Published 10/02/2014 · updated 17/06/2026

In short

CVE-2014-1931 is a MEDIUM (CVSS 4.3) vulnerability affecting cyber recruiter (visibility software).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 64.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
cyber recruiter visibility_software	`= 6.2= 6.4= 6.6= 6.8= 7.0= 7.2≤ 8.0`	No fix yet

Description

The user login page in Visibility Software Cyber Recruiter before 8.1.00 generates different responses for invalid password-retrieval attempts depending on which data elements are incorrect, which might allow remote attackers to obtain account-related information via a series of requests.

References

securityfocus.com/bid/65564
vspublic.com/help/Cyber%20Recruiter/default.aspx · Vendor Advisory

More vulnerabilities in cyber recruiter

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free