Vulnerabilities > Visibility Software > Cyber Recruiter > 6.4

DATE	CVE	VULNERABILITY TITLE	RISK
2014-02-10	CVE-2014-1931	Information Exposure vulnerability in Visibility Software Cyber Recruiter The user login page in Visibility Software Cyber Recruiter before 8.1.00 generates different responses for invalid password-retrieval attempts depending on which data elements are incorrect, which might allow remote attackers to obtain account-related information via a series of requests. network visibility-software CWE-200	4.3
2014-02-10	CVE-2014-1930	Information Exposure vulnerability in Visibility Software Cyber Recruiter Visibility Software Cyber Recruiter before 8.1.00 does not use the appropriate combination of HTTPS transport and response headers to prevent access to (1) AppSelfService.aspx and (2) AgencyPortal.aspx in the browser history, which allows remote attackers to obtain sensitive information by leveraging an unattended workstation. network visibility-software CWE-200	4.3

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.