← All advisories

High severity7.5NVD Advisory· Published Sep 21, 2017· Updated Jun 17, 2026

CVE-2017-14680

CVE-2017-14680

Description

ZKTeco ZKTime Web 2.0.1.12280 allows remote attackers to obtain sensitive employee metadata via a direct request for a PDF document.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Zkteco/Zktime Web2 versions
cpe:2.3:a:zkteco:zktime_web:2.0.1.12280:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:zkteco:zktime_web:2.0.1.12280:*:*:*:*:*:*:*
- (no CPE)range: 2.0.1.12280

Patches

Vulnerability mechanics

References

2

seclists.org/bugtraq/2017/Sep/20nvdExploitMailing ListThird Party Advisory
seclists.org/fulldisclosure/2017/Sep/39nvdExploitMailing ListThird Party Advisory

News mentions

0

No linked articles in our index yet.