Login Request a demo
BI
Product
BioTime
by ZKTeco · last CVE Oct 12, 2026
On CISA KEVExploited in the wild
18
CVEs
1
On KEV
9.8
Max CVSS
5
New 30D
Vulnerabilities18In the news0Timeline
Severity mix
Critical 1High 6Medium 11Low 0
Severity
All severities18Critical1High6Medium11Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add BioTime to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-38803
6.8
1%
Nov 30
Zkteco BioTime < 8.5.3 Build:20200816.447 is vulnerable to Incorrect Access Control via Leave, overtime, Manual log
Affected: before 8.5.4
CVE-2023-51141
6.5
1%
Mar 21
An issue in ZKTeko BioTime v.8.5.4 and before allows a remote attacker to obtain sensitive information via the Authentication & Authorization component
Affected: 8.5.4
CVE-2026-108794
6.3
0%
Oct 12
ZKTeco BioTime Database Migration Functionality db_migrate_setting sql injection
Affected: 9.5.6 Build 20260130.3206
CVE-2022-38802
6.2
1%
Nov 30
Zkteco BioTime < 8.5.3 Build:20200816.447 is vulnerable to Incorrect Access Control via resign, private message, manual log, time interval, attshift, and holiday
Affected: before 8.5.4
CVE-2024-6523
5.4
0%
Jul 5
ZKTeco BioTime system-group-add cross site scripting
Affected: 9.5.0; 9.5.1; 9.5.2
CVE-2022-38801
5.4
0%
Nov 30
In Zkteco BioTime < 8.5.3 Build:20200816.447, an employee can hijack an administrator session and cookies using blind cross-site scripting
Affected: before 8.5.4
CVE-2025-15128
5.3
0%
Dec 28
ZKTeco BioTime Endpoint safe_setting credentials storage
Affected: 9.0.0; 9.0.1; 9.0.2; 9.0.3; 9.0.4; 9.5.0; +2 more
CVE-2022-30515
5.3
1%
Nov 8
ZKTeco BioTime 8.5.4 is missing authentication on folders containing employee photos, allowing an attacker to view them through filename enumeration
Affected: 8.5.4; 8.5.5
CVE-2026-108797
4.3
0%
Oct 12
ZKTeco BioTime Employee REST API employees authorization
Affected: 9.5.6 Build 20260130.3206
CVE-2026-108796
4.3
0%
Oct 12
ZKTeco BioTime Biometric Data Endpoint finger_data authorization
Affected: 9.5.6 Build 20260130.3206
CVE-2026-108795
4.3
0%
Oct 12
ZKTeco BioTime System Settings API systemSettings access control
Affected: 9.5.6 Build 20260130.3206
Showing 11