Advisories · Technology
ZKTeco BioTime.
Every CVE that names ZKTeco BioTime among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
ZKTeco BioTime hard-coded key
- ZKTeco BioTime
- Hard-coded credentials
- CWE-320
- CVSS 5.3 Medium
ZKTeco BioTime Employee REST API employees authorization
- ZKTeco BioTime
- Broken access control
- CVSS 5.3 Medium
ZKTeco BioTime Biometric Data Endpoint finger_data authorization
- ZKTeco BioTime
- Broken access control
- CVSS 5.3 Medium
ZKTeco BioTime System Settings API systemSettings access control
- ZKTeco BioTime
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
ZKTeco BioTime Database Migration Functionality db_migrate_setting sql injection
- ZKTeco BioTime
- Other injection
- SQL injection
- CVSS 6.9 Medium
ZKTeco BioTime Endpoint safe_setting credentials storage
- ZKTeco BioTime
- CWE-255
- CWE-256
- CVSS 6.9 Medium
ZKTeco BioTime default password
- ZKTeco BioTime
- CWE-1393
- CVSS 5.3 Medium
ZKTeco BioTime system-group-add cross site scripting
- ZKTeco BioTime
- Cross-site scripting (XSS)