Known vulnerabilities in Kronos webTA

Vendor: Kronos Incorporated
Software: Kronos webTA
Software CPE: cpe:2.3:a:kronosorporated:kronos_web_time_and_attendance:*:*:*:*:*:*:*:*
Website: https://www.kronos.com/
Total vulnerabilities: 4
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Kronos webTA Kronos webTA is affected by 4 known vulnerabilities: 2 medium, 2 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU24799 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-8493		 CWE-79 Low
Available
No
 4.0 31.01.2020 SB2020013113
#VU24798 - Permissions, Privileges, and Access Controls
CVE-2020-8494		 CWE-264 Medium
Available
No
 4.0 31.01.2020 SB2020013113
#VU24797 - Permissions, Privileges, and Access Controls
CVE-2020-8495		 CWE-264 Medium
Available
No
 4.0 31.01.2020 SB2020013113
#VU24796 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-8496		 CWE-79 Low
No
No
 5.0 31.01.2020 SB2020013112