Skip to content
OpenAdvisories

Vendor

ZKTeco

37 known vulnerabilities.

Products

BioTime 8 ZKTeco ZKBioSecurity 6 ZkTeco-based OEM devices with firmware ZAM170-NF-1.8.25-7354-Ver1.0.0 5 WL20 Biometric Attendance System 4 ZKBio CVSecurity V5000 3 SSC335-GC2063-Face-0b77 Solution Camera 1 ZKTeco ZKAccess Security System 1 ZkTeco-based OEM devices with firmware ZAM170-NF-1.8.25-7354-Ver1.0.0, Standalone service v. 2.1.6-20200907 1 ZKTeco ZKAccess Professional 1 ZKBio Access IVS 1 ZKBio CVSecurity 1 ZKBio Time 1 ZKTeco ZKTime.Net 1 iClock v3.1-168 1 ZEM800 1 ZKBio Media 1 SSC335-GC2063-Face-0b77 Solution 0
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Low 3.7
    CVE-2024-11049

    ZKTeco ZKBio Time Image File photo direct request

    A vulnerability classified as problematic has been found in ZKTeco ZKBio Time 9.0.1. Affected is an unknown function of the file /auth_files/photo/ of the component Image File Handler. The manipulation leads to direct request. It is possible to launch the att…

    ZKTeco ZKBio Time
  • Low 3.5
    CVE-2024-6523

    ZKTeco BioTime system-group-add cross site scripting

    A vulnerability was found in ZKTeco BioTime up to 9.5.2. It has been classified as problematic. Affected is an unknown function of the component system-group-add Handler. The manipulation of the argument user with the input <script>alert('XSS')</script> leads…

    ZKTeco BioTime
  • Low 2.4
    CVE-2024-6344

    ZKTeco ZKBio CVSecurity V5000 Push Configuration Section cross site scripting

    A vulnerability, which was classified as problematic, was found in ZKTeco ZKBio CVSecurity V5000 4.1.0. This affects an unknown part of the component Push Configuration Section. The manipulation of the argument Configuration Name leads to cross site scripting…

    ZKTeco ZKBio CVSecurity V5000
  • Low 3.5
    CVE-2024-6006

    ZKTeco ZKBio CVSecurity V5000 Summer Schedule cross site scripting

    A vulnerability was found in ZKTeco ZKBio CVSecurity V5000 4.1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Summer Schedule Handler. The manipulation of the argument Schedule Name leads to cross si…

    ZKTeco ZKBio CVSecurity V5000
  • Low 3.5
    CVE-2024-6005

    ZKTeco ZKBio CVSecurity V5000 Department Section cross site scripting

    A vulnerability was found in ZKTeco ZKBio CVSecurity V5000 4.1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Department Section. The manipulation of the argument Department Name leads to cr…

    ZKTeco ZKBio CVSecurity V5000
  • Low 3.5
    CVE-2024-1706

    ZKTeco ZKBio Access IVS Department Name Search Bar cross site scripting

    A vulnerability was determined in ZKTeco ZKBio Access IVS up to 3.3.2. This impacts an unknown function of the component Department Name Search Bar. This manipulation with the input <marquee>hi causes cross site scripting. Remote exploitation of the attack is…

    ZKTeco ZKBio Access IVS