What’s Vulnerable › Products

NesterSoft Inc. WorkTime (on-prem/cloud) vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your NesterSoft Inc. WorkTime (on-prem/cloud) version is affected

Latest NesterSoft Inc. WorkTime (on-prem/cloud) vulnerabilities

• CVE-2025-15563 — Broken Access Control results in Denial of Service in NesterSoft WorkTime (CVSS 5.3)
• CVE-2025-15562 — Reflected Cross-Site Scripting in NesterSoft WorkTime (CVSS 6.1)
• CVE-2025-15561 — Local Privilege Escalation in NesterSoft WorkTime (CVSS 7.8)
• CVE-2025-15560 — SQL Injection in NesterSoft WorkTime (CVSS 8.8)
• CVE-2025-15559 — Unauthenticated OS Command Injection in NesterSoft WorkTime (CVSS 9.8)