NesterSoft Inc.

Products

ProductCVEsExploitedLatest
WorkTime (on-prem/cloud)5–Feb 19, 2026

Exploited and recent CVEs

  • CVE-2025-15563 Medium 5.3 Broken Access Control results in Denial of Service in NesterSoft WorkTime 0.3%
  • CVE-2025-15562 Medium 6.1 Reflected Cross-Site Scripting in NesterSoft WorkTime 0.2%
  • CVE-2025-15561 High 7.8 Local Privilege Escalation in NesterSoft WorkTime 0.1%
  • CVE-2025-15560 High 8.8 SQL Injection in NesterSoft WorkTime 0.3%
  • CVE-2025-15559 Critical 9.8 Unauthenticated OS Command Injection in NesterSoft WorkTime 0.5%