CVE-2020-35604

Description

References

• mindpointgroup.com/blog/webta-xxe-version-5-0-4-vulnerability · Exploit

Altre vulnerabilità di web time and attendance

• CVE-2020-14982MEDIO 6.5A Blind SQL Injection vulnerability in Kronos WebTA 3.8.x and later before 4.0 (affecting the com.threeis.webta.H352premPayRequest servlet's…
• CVE-2020-8496MEDIO 4.8In Kronos Web Time and Attendance (webTA) 4.1.x and later 4.x versions before 5.0, there is a Stored XSS vulnerability by setting the Applic…
• CVE-2020-8495ALTO 7.5In Kronos Web Time and Attendance (webTA) 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H491delegate servlet allows an atta…
• CVE-2020-8494ALTO 8.8In Kronos Web Time and Attendance (webTA) 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H402editUser servlet allows an atta…
• CVE-2020-8493MEDIO 4.8A stored XSS vulnerability in Kronos Web Time and Attendance (webTA) affects 3.8.x and later 3.x versions before 4.0 via multiple input fiel…