Kimai2 Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Kimai2 Project records in CISA KEV

No Kimai2 Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2021-02889 CVE-2021-3992 · GHSA-9w8f-7wgr-2h7g

LOW 31

kimai2 is vulnerable to Improper Access Control

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01065 Published 2021-12-01 Fixed in 1.16.2, 1.16.3 CWE-284

TI-2021-02880 CVE-2021-3983 · GHSA-67c7-5v9j-227r

LOW 29

kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0079 Published 2021-12-01 Fixed in 1.16.3 CWE-79