CVE-2020-8496 MEDIUM

CVE-2020-8496

Vendor N/A
Product n/a
Published January 30, 2020
Last update August 4, 2024
View on NVD All CVEs

CVSS base score

6.9/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction Required
Confidentiality Low
Integrity High

CVSS vector

CVSS:3.0/AC:L/AV:N/A:N/C:L/I:H/PR:H/S:C/UI:R

What the vulnerability does

01Description

In Kronos Web Time and Attendance (webTA) 4.1.x and later 4.x versions before 5.0, there is a Stored XSS vulnerability by setting the Application Banner input field of the /ApplicationBanner page as an authenticated administrator.

Key dates

02Disclosure timeline

January 30, 2020 CVE published
August 4, 2024 Record updated