kronos kayıtları
kronos üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-611 Improper Restriction of XML External Entity Reference1
- CWE-862 Missing Authorization1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2020-35604İstismar yok | An XXE attack can occur in Kronos WebTA 5.0.4 when SAML is used.kronos · web time and attendance · CWE-611 | Kritik9,8 | — | %1,7 | 21 Ara 2020 |
35İzleyin | CVE-2020-8494İstismar yok | In Kronos Web Time and Attendance (webTA) 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H402editUser servlet allows an attakronos · web time and attendance | Yüksek8,8 | — | %1,1 | 30 Oca 2020 |
31İzleyin | CVE-2020-8495Kavram kanıtı | In Kronos Web Time and Attendance (webTA) 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H491delegate servlet allows an attakronos · web time and attendance · CWE-862 | Yüksek7,5 | — | %3,1 | 30 Oca 2020 |
26İzleyin | CVE-2020-14982İstismar yok | A Blind SQL Injection vulnerability in Kronos WebTA 3.8.x and later before 4.0 (affecting the com.threeis.webta.H352premPayRequest servlet'skronos · web time and attendance · CWE-89 | Orta6,5 | — | %1,3 | 15 Tem 2020 |
19İzleyin | CVE-2020-8493Kavram kanıtı | A stored XSS vulnerability in Kronos Web Time and Attendance (webTA) affects 3.8.x and later 3.x versions before 4.0 via multiple input fielkronos · web time and attendance · CWE-79 | Orta4,8 | — | %1,5 | 30 Oca 2020 |
19İzleyin | CVE-2020-8496İstismar yok | In Kronos Web Time and Attendance (webTA) 4.1.x and later 4.x versions before 5.0, there is a Stored XSS vulnerability by setting the Applickronos · web time and attendance · CWE-79 | Orta4,8 | — | %0,5 | 30 Oca 2020 |
17İzleyin | CVE-2008-6666İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in Kronos webTA allow remote attackers to inject arbitrary web script or HTML via the dekronos · kronos webta · CWE-79 | Orta4,3 | — | %1,2 | 8 Nis 2009 |
- CVE-2020-3560439İzleyin
An XXE attack can occur in Kronos WebTA 5.0.4 when SAML is used.
KritikCVSS 9,8İstismar yokEPSS %2kronos · web time and attendance21 Ara 2020
- CVE-2020-849435İzleyin
In Kronos Web Time and Attendance (webTA) 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H402editUser servlet allows an atta
YüksekCVSS 8,8İstismar yokEPSS %1kronos · web time and attendance30 Oca 2020
- CVE-2020-849531İzleyin
In Kronos Web Time and Attendance (webTA) 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H491delegate servlet allows an atta
YüksekCVSS 7,5Kavram kanıtıEPSS %3kronos · web time and attendance30 Oca 2020
- CVE-2020-1498226İzleyin
A Blind SQL Injection vulnerability in Kronos WebTA 3.8.x and later before 4.0 (affecting the com.threeis.webta.H352premPayRequest servlet's
OrtaCVSS 6,5İstismar yokEPSS %1kronos · web time and attendance15 Tem 2020
- CVE-2020-849319İzleyin
A stored XSS vulnerability in Kronos Web Time and Attendance (webTA) affects 3.8.x and later 3.x versions before 4.0 via multiple input fiel
OrtaCVSS 4,8Kavram kanıtıEPSS %1kronos · web time and attendance30 Oca 2020
- CVE-2020-849619İzleyin
In Kronos Web Time and Attendance (webTA) 4.1.x and later 4.x versions before 5.0, there is a Stored XSS vulnerability by setting the Applic
OrtaCVSS 4,8İstismar yokEPSS %1kronos · web time and attendance30 Oca 2020
- CVE-2008-666617İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Kronos webTA allow remote attackers to inject arbitrary web script or HTML via the de
OrtaCVSS 4,3İstismar yokEPSS %1kronos · kronos webta8 Nis 2009