$ cve CVE-2017-14680 JSON

CVE-2017-14680 EXPLOIT

7.5

HIGH · CVSS 3.0 · EPSS 4.3% (pctl 91)

Patch early

A public exploit exists.

ZKTeco ZKTime Web 2.0.1.12280 allows remote attackers to obtain sensitive employee metadata via a direct request for a PDF document.

CVSS	7.5 (HIGH, v3.0)
Vector	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS	4.33% — more likely to be exploited than 91% of all CVEs
Weakness	CWE-200
On CISA KEV	no
Public exploit	yes
Published	2017-09-21
Last modified	2026-06-17

Vendor	Product
zkteco	zktime web

Source	Title	Date
exploit-db	ZKTime Web Software 2.0 - Improper Access Restrictions	2017-08-18