Skip to contentZkteco Zkbio Cvsecurity vulnerabilities
- zkteco zkbio cvsecurityIn ZKT ZKBio CVSecurity 6.4.1_R an unauthenticated attacker can craft JWT token using the...CVE-2025-45746Disputed6.5 Medium
- zkteco zkbio cvsecurityZKTeco ZKBio CVSecurity v6.1.1 was discovered to contain a hardcoded cryptographic key.CVE-2024-365269.8 Critical
- zkteco zkbio cvsecurity v5000, zkbiosecurity v5000 +1 moreZKTeco ZKBio CVSecurity V5000 Department Section cross site scriptingCVE-2024-60055.1 Medium
- zkteco zkbio cvsecurityZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Incorrect Access Control. An authenticated user, without the permissions of managing users, can create a new admin user.CVE-2024-354338.1 High
- zkteco zkbio cvsecurityZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via BaseMediaFile. An authenticated user can delete local files from the server which can lead to DoS.CVE-2024-354287.1 High
- zkteco zkbio cvsecurityZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via eventRecord.CVE-2024-354296.5 Medium
- zkteco zkbio cvsecurityZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via photoBase64. An unauthenticated user can download local files from the server. NOTE: Third parties have indicated other versions…CVE-2024-354317.5 High
- zkteco zkbio cvsecurityZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Cross Site Scripting (XSS) via an Audio File. An authenticated user can injection malicious JavaScript code to trigger a Cross Site Scripting.CVE-2024-354326.1 Medium
- zkteco zkbio cvsecurityIn ZKTeco ZKBio CVSecurity v6.1.1_R and earlier (fixed in 6.1.3_R) an authenticated user can bypass password checks while exporting data from the application.CVE-2024-354308.1 High