Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: Icontime Clear all filters
TI-2017-12371 CVE-2017-16819 · GHSA-54cv-f75x-mjwf

A stored cross-site scripting vulnerability in the Icon Time Systems RTC-1000 v2.5.7458…

Priority LOW 28

A stored cross-site scripting vulnerability in the Icon Time Systems RTC-1000 v2.5.7458 and earlier time clock allows remote attackers to inject arbitrary JavaScript in the nameFirst (aka First Name) field for the employ…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01897 Published 2017-11-17 No fix listed CWE-79