Kronos Web Time And Attendance
6 CVEs affecting Kronos Web Time And Attendance. Latest disclosed: 2020-12-21. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-35604 | Critical | 9.8 | 2020-12-21 | An XXE attack can occur in Kronos WebTA 5.0.4 when SAML is used. |
CVE-2020-8494 | High | 8.8 | 2020-01-30 | In Kronos Web Time and Attendance (webTA) 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H402editUser servlet allows an attacker with Timekeepe… |
CVE-2020-8495 | High | 7.5 | 2020-01-30 | In Kronos Web Time and Attendance (webTA) 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H491delegate servlet allows an attacker with Timekeepe… |
CVE-2020-14982 | Medium | 6.5 | 2020-07-15 | A Blind SQL Injection vulnerability in Kronos WebTA 3.8.x and later before 4.0 (affecting the com.threeis.webta.H352premPayRequest servlet's SortBy parameter)… |
CVE-2020-8496 | Medium | 4.8 | 2020-01-30 | In Kronos Web Time and Attendance (webTA) 4.1.x and later 4.x versions before 5.0, there is a Stored XSS vulnerability by setting the Application Banner input… |
CVE-2020-8493 | Medium | 4.8 | 2020-01-30 | A stored XSS vulnerability in Kronos Web Time and Attendance (webTA) affects 3.8.x and later 3.x versions before 4.0 via multiple input fields (Login Message… |