Kronos Web Time and Attendance (webTA) 4.1.17 R1
Approved changes feed: RSS · Atom
cpe:2.3:a:kronos:web_time_and_attendance:4.1.17:r1:*:*:*:*:*:*
part: a version: 4.1.17 update: r1
| Vendor | Kronos (1c181755-eb5c-5f2b-9c09-f563af8aad05) |
|---|---|
| Product | Web Time And Attendance (3431b97b-38f3-5516-a2df-e8cfe8c6f038) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-8496 |
vulnerable | 2026-06-08 05:27:16.650809 |
Details available
MEDIUM (6.9)
In Kronos Web Time and Attendance (webTA) 4.1.x and later 4.x versions before 5.0, there is a Stored XSS vulnerability by setting the Application Banner input field of the /ApplicationBanner page as an authenticated administrator.
Published: 2020-01-30T21:17:59.000Z
Updated: 2024-08-04T10:03:44.861Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.