Login Request a demo
ZW
Product
Zktime Web
by Zkteco · last CVE Jul 26, 2024
5
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 4Medium 1Low 0
Severity
All severities5Critical0High4Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Zktime Web to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-17056
8.8
1%
Dec 4
The ZKTime Web Software 2.0.1.12280 allows the Administrator to elevate the privileges of the application user using a 'password_change()' function of the Modify Password…
Affected: 2.0.1.12280
CVE-2017-13129
8.0
1%
Sep 26
Cross-site request forgery (CSRF) vulnerability in ZKTeco ZKTime Web 2.0.1.12280 allows remote authenticated users to hijack the authentication of administrators for requests that…
Affected: 2.0.1.12280
CVE-2024-24257
7.5
0%
Jul 26
An issue in skteco.com Central Control Attendance Machine web management platform v.3.0 allows an attacker to obtain sensitive information via a crafted script to the csl/user…
Affected: 3.0
CVE-2017-14680
7.5
4%
Sep 21
ZKTeco ZKTime Web 2.0.1.12280 allows remote attackers to obtain sensitive employee metadata via a direct request for a PDF document
Affected: 2.0.1.12280
CVE-2017-17057
6.1
1%
Dec 4
There is a reflected XSS vulnerability in ZKTime Web 2.0.1.12280
Affected: 2.0.1.12280
Showing 5