Skip to content
OpenAdvisories

Vendor

NesterSoft

5 known vulnerabilities.

Products

WorkTime (on-prem/cloud) 5
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2025-15559

    Unauthenticated OS Command Injection in NesterSoft WorkTime

    An unauthenticated attacker can inject OS commands when calling a server API endpoint in NesterSoft WorkTime. The server API call to generate and download the WorkTime client from the WorkTime server is vulnerable in the “guid” parameter. This allows an attac…

    NesterSoft WorkTime (on-prem/cloud)