kimai

Records47All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high10CVSS 7.0–8.9

Exploited now

kimai records in CISA KEV

No kimai vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Kimai2 · all components

TI-2021-02882 CVE-2021-3985 · GHSA-x68c-4gmm-5g43

MEDIUM 41

kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.01257 Published 2021-12-01 Fixed in 1.16.3 CWE-79