Efrotech

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Efrotech records in CISA KEV

No Efrotech vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2025-28953 CVE-2025-46157 · GHSA-rhhr-cx2r-jpwf

HIGH 76

An issue in EfroTech Time Trax v.1.0 allows a remote attacker to execute arbitrary code via the file attachment function in the leave request form

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00886 Published 2025-06-18 No fix listed CWE-434

TI-2024-26228 CVE-2024-39250 · GHSA-3w9x-7c3c-4gxq

MEDIUM 57

EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability via the q parameter in the search web interface.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04886 Published 2024-07-22 No fix listed CWE-89