Idattend

Idattend develops a focused vulnerability footprint centered on its IdWeb web-based access and management platform, which appears to serve identity and attendance management functions in enterprise environments. Vulnerabilities affecting this vendor skew strongly toward critical-severity outcomes and recur consistently across a narrow product portfolio through authentication, input-validation, and access-control weakness classes—missing authentication for critical functions, SQL injection, cross-site scripting, and improper disclosure of sensitive files—that are characteristic of web applications handling sensitive credential and attendance data. The concentration of critical-severity flaws in a widely deployed web platform used to manage identity systems represents a high-priority attack surface for defenders tracking this vendor. Inventory instances of IdWeb and prioritize patches for authentication and injection-related disclosures; live exploitation activity and current severity counts are shown alongside this summary.