Published: 30/01/2020 Updated: 05/02/2020
CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8
Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N

Vulnerability Summary

A stored XSS vulnerability in Kronos Web Time and Attendance (webTA) affects 3.8.x and later 3.x versions prior to 4.0 via multiple input fields (Login Message, Banner Message, and Password Instructions) of the com.threeis.webta.H261configMenu servlet via an authenticated administrator.

Vulnerability Trend

Affected Products

Vendor Product Versions
KronosWeb Time And Attendance3.8

Mailing Lists

Kronos WebTA version 40 suffers from cross site scripting and authenticated remote privilege escalation vulnerabilities ...