VULNERABILITY INTELLIGENCE

CVE-2024-55971

CVSS score10 CRITICAL

EPSS probability0.68%

CISA KEVNot currently listed

Published2025-01-23

Last modified2026-06-17

Description

SQL Injection vulnerability in the default configuration of the Logitime WebClock application <= 5.43.0 allows an unauthenticated user to run arbitrary code on the backend database server.