Vulnerabilities > CVE-2020-35604 - XXE vulnerability in Kronos web Time and Attendance 5.0.4
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
COMPLETE Integrity impact
COMPLETE Availability impact
COMPLETE Summary
An XXE attack can occur in Kronos WebTA 5.0.4 when SAML is used.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |