Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: ZKTeco Component: Zktime Web Clear all filters
TI-2017-12521 CVE-2017-17056 · GHSA-v25g-pr9m-qxq7

The ZKTime Web Software 2.0.1.12280 allows the Administrator to elevate the privileges of…

Priority LOW 39

The ZKTime Web Software 2.0.1.12280 allows the Administrator to elevate the privileges of the application user using a 'password_change()' function of the Modify Password component, reachable via the old_password, new_pa…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00741 Published 2017-12-04 No fix listed CWE-352
TI-2017-09747 CVE-2017-13129 · GHSA-2cwj-97vw-wc3w

Cross-site request forgery (CSRF) vulnerability in ZKTeco ZKTime Web 2.0.1.12280 allows…

Priority LOW 37

Cross-site request forgery (CSRF) vulnerability in ZKTeco ZKTime Web 2.0.1.12280 allows remote authenticated users to hijack the authentication of administrators for requests that add administrators by leveraging lack of…

CVSS 3.0HIGH 8.0 Network Low privileges User interaction EPSS 0.01079 Published 2017-09-26 No fix listed CWE-352