Skip to contentZkteco Biotime vulnerabilities
- zkteco biotimeZKTeco BioTime hard-coded keyCVE-2026-1087986.9 Medium
- zkteco biotimeZKTeco BioTime Employee REST API employees authorizationCVE-2026-1087975.3 Medium
- zkteco biotimeZKTeco BioTime Biometric Data Endpoint finger_data authorizationCVE-2026-1087965.3 Medium
- zkteco biotimeZKTeco BioTime System Settings API systemSettings access controlCVE-2026-1087955.3 Medium
- zkteco biotimeZKTeco BioTime Database Migration Functionality db_migrate_setting sql injectionCVE-2026-1087945.3 Medium
- zkteco biotimeZKTeco BioTime Endpoint safe_setting credentials storageCVE-2025-151286.9 Medium
- zkteco biotimeZKTeco BioTime default passwordCVE-2024-139666.9 Medium
- zkteco biotimeZKTeco BioTime system-group-add cross site scriptingCVE-2024-65235.3 Medium
- zkteco biotimeAn issue in ZKTeco BioTime v.8.5.4 and before allows a remote attacker to obtain sensitive...CVE-2023-511427.5 High
- zkteco biotimeAn issue in ZKTeko BioTime v.8.5.4 and before allows a remote attacker to obtain sensitive...CVE-2023-511416.5 Medium
- zkteco biotimeInsecure access control in ZKTeco BioTime v8.5.5 allows unauthenticated attackers to read...CVE-2023-389527.5 High
- zkteco biotimeA path traversal vulnerability in ZKTeco BioTime v8.5.5 allows attackers to write arbitrary files...CVE-2023-389519.8 Critical
- zkteco biotimeA path traversal vulnerability in the iclock API of ZKTeco BioTime v8.5.5 allows unauthenticated...CVE-2023-38950In KEVEPSS 92.5%7.5 High
- zkteco biotimeAn issue in a hidden API in ZKTeco BioTime v8.5.5 allows unauthenticated attackers to arbitrarily...CVE-2023-389497.5 High
- zkteco biotimeZkteco BioTime < 8.5.3 Build:20200816.447 is vulnerable to Incorrect Access Control via Leave,...CVE-2022-388036.8 Medium
- zkteco biotimeZkteco BioTime < 8.5.3 Build:20200816.447 is vulnerable to Incorrect Access Control via resign,...CVE-2022-388026.2 Medium
- zkteco biotimeIn Zkteco BioTime < 8.5.3 Build:20200816.447, an employee can hijack an administrator session and...CVE-2022-388015.4 Medium
- zkteco biotimeZKTeco BioTime 8.5.4 is missing authentication on folders containing employee photos, allowing an...CVE-2022-305155.3 Medium