Zkteco

Biotime

12 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.8

CVE-2022-38803

Exploit
  • EPSS 0.14%
  • Published 30.11.2022 14:15:10
  • Last modified 24.04.2025 20:15:23

Zkteco BioTime < 8.5.3 Build:20200816.447 is vulnerable to Incorrect Access Control via Leave, overtime, Manual log. An authenticated employee can read local files by exploiting XSS into a pdf generator when exporting data as a PDF

5.3

CVE-2022-30515

Exploit
  • EPSS 0.26%
  • Published 08.11.2022 23:15:09
  • Last modified 01.05.2025 19:15:50

ZKTeco BioTime 8.5.4 is missing authentication on folders containing employee photos, allowing an attacker to view them through filename enumeration.