cbcvebase.

Epicor Human Capital Management vulnerabilities

1 known vulnerability affecting epicor/human_capital_management.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2025-22953P2CRITICALCVSS 9.8v2021_1.92025-03-28
CVE-2025-22953 [CRITICAL] CWE-89 CVE-2025-22953: A SQL injection vulnerability exists in Epicor HCM 2021 1.9, with patches available: 5.16.0.1033/HCM A SQL injection vulnerability exists in Epicor HCM 2021 1.9, with patches available: 5.16.0.1033/HCM2022, 5.17.0.1146/HCM2023, and 5.18.0.573/HCM2024. The injection is specifically in the filter parameter of the JsonFetcher.svc endpoint. An attacker can exploit this vulnerability by injecting malicious SQL payloads into the filter parameter, enabli
nvd
Epicor Human Capital Management vulnerabilities | cvebase