Kaifa Technology

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Kaifa Technology records in CISA KEV

No Kaifa Technology vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records

TI-2023-26247 CVE-2023-48392 · GHSA-wv9r-p2rc-jcrp

MEDIUM 43

Kaifa Technology WebITR is an online attendance system, it has a vulnerability in using hard-coded encryption key.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0057 Published 2023-12-15 No fix listed CWE-321

TI-2023-26249 CVE-2023-48394 · GHSA-j8v2-m2f3-8jgf

MEDIUM 40

Kaifa Technology WebITR is an online attendance system, its file uploading function does not restrict upload of file with dangerous type.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00886 Published 2023-12-15 No fix listed CWE-434

TI-2023-26250 CVE-2023-48395 · GHSA-f28x-rjg5-px57

LOW 38

Kaifa Technology WebITR is an online attendance system, it has insufficient validation for user input within a special function.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00709 Published 2023-12-15 No fix listed CWE-89

TI-2023-26248 CVE-2023-48393 · GHSA-7www-x428-rw8w

LOW 21

Kaifa Technology WebITR is an online attendance system.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0057 Published 2023-12-15 No fix listed CWE-209