Timetracker

Vendor:

First CVE: Aug 31, 2015 · Active for 10 years

2

Total CVEs

Bottom 1%

1.0

Avg CVEs / Year

Bottom 1%

4.5

Avg CVSS

Higher Avg CVSS than 11% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Timetracker over time

Volume of CVEsAvg CVSS Base Score

First CVE

Aug 31, 2015

10 years ago

Most Recent CVE

Oct 18, 2021

1,740 days ago

CVE Severity & Scoring

Timetracker2 CVEs

50%

All CVEs352,294 CVEs

45%

40%

11%

LowMedium

Attack Vector

Local0 (0.0%)

Network1 (50.0%)

Unknown1 (50.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low1 (50.0%)

High0 (0.0%)

Unknown1 (50.0%)

User Interaction

None0 (0.0%)

Unknown1 (50.0%)

Required1 (50.0%)

Privileges Required

Low1 (50.0%)

High0 (0.0%)

None0 (0.0%)

Unknown1 (50.0%)

Top CVEs

Signals from CVEs in this product scope (2 CVEs).

2 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2021-41156MEDIUM anuko/timetracker is an, open source time tracking system. In affected versions Time Tracker uses browser_today hidden control on a few pages to collect the today's date from user	Oct 18, 2021	5.4	19	NO	NO
CVE-2015-6751LOW Multiple cross-site scripting (XSS) vulnerabilities in the Time Tracker module 7.x-1.x before 7.x-1.4 for Drupal allow remote authenticated users with certain permissions to inject	Aug 31, 2015	3.5	13	NO	NO

View all 2 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (2 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

0 CVEs

0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (2 CVEs).

Media Mentions

Signals from CVEs in this product scope (2 CVEs).

Top CNAs Publishing CVEs For Timetracker

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS
7.x-1.3	1	3.5	1.4%
7.x-1.2	1	3.5	1.4%
7.x-1.1	1	3.5	1.4%
7.x-1.0	1	3.5	1.4%