Login Request a demo
ZC
Product
ZKBio CVSecurity
by ZKTeco · last CVE May 13, 2025
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 2High 4Medium 2Low 0
Severity
All severities8Critical2High4Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add ZKBio CVSecurity to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-45746
9.8
0%
May 13
In ZKT ZKBio CVSecurity 6.4.1_R an unauthenticated attacker can craft JWT token using the hardcoded secret to authenticate to the service console
Affected: 6.4.1_R before 6.6.0_R
CVE-2024-36526
9.8
1%
Jul 9
ZKTeco ZKBio CVSecurity v6.1.1 was discovered to contain a hardcoded cryptographic key
Affected: 6.1.1
CVE-2024-35433
8.1
0%
May 30
ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Incorrect Access Control
Affected: 6.1.1
CVE-2024-35430
8.1
1%
May 30
In ZKTeco ZKBio CVSecurity v6.1.1_R and earlier (fixed in 6.1.3_R) an authenticated user can bypass password checks while exporting data from the application
Affected: 6.1.1
CVE-2024-35431
7.5
1%
May 30
ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via photoBase64
Affected: 6.1.1
CVE-2024-35428
7.1
1%
May 30
ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via BaseMediaFile
Affected: 6.1.1
CVE-2024-35429
6.5
1%
May 30
ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via eventRecord
Affected: 6.1.1
CVE-2024-35432
6.1
0%
May 30
ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Cross Site Scripting (XSS) via an Audio File
Affected: 6.1.1
Showing 8