CVE-2020-24007: Umanni Human Resources

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

Umanni RH 1.0 does not limit the number of authentication attempts. An unauthenticated user may exploit this vulnerability to launch a brute-force authentication attack against the Login page.

Affected products

• Umanni Human Resources: version 1.0 only

Published 2020-08-26. Last modified 2026-06-17.