TI-2025-14198 CVE-2025-15559 · GHSA-p5gf-vhgm-432f
Unauthenticated OS Command Injection in NesterSoft WorkTime
Priority HIGH 82
An unauthenticated attacker can inject OS commands when calling a server API endpoint in NesterSoft WorkTime.
NesterSoft Inc.
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
NesterSoft Inc. records in CISA KEVNo NesterSoft Inc. vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2025-14200 CVE-2025-15561 · GHSA-6x8c-24f7-p33h
Local Privilege Escalation in NesterSoft WorkTime
Priority HIGH 69
An attacker can exploit the update behavior of the WorkTime monitoring daemon to elevate privileges on the local system to NT Authority\SYSTEM.
TI-2025-14199 CVE-2025-15560 · GHSA-vq94-wmm9-737m
SQL Injection in NesterSoft WorkTime
Priority MEDIUM 40
An authenticated attacker with minimal permissions can exploit a SQL injection in the WorkTime server "widget" API endpoint to inject SQL queries.
TI-2025-14202 CVE-2025-15563 · GHSA-fr87-mwgv-wmcc
Broken Access Control results in Denial of Service in NesterSoft WorkTime
Priority LOW 30
Any unauthenticated user can reset the WorkTime on-prem database configuration by sending a specific HTTP request to the WorkTime server.
TI-2025-14201 CVE-2025-15562 · GHSA-3822-8jq8-pqhh
Reflected Cross-Site Scripting in NesterSoft WorkTime
Priority LOW 26
The server API endpoint /report/internet/urls reflects received data into the HTML response without applying proper encoding or filtering.