Known Vulnerabilities for Kimai by Kimai
Listed below are 8 of the newest known vulnerabilities associated with "Kimai" by "Kimai".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-80200 json | Kimai before 2.53.0 contains an open redirect vulnerability in the SAML authentication success handler that accepts unvalidat... | Not Provided | 2026-08-26 | 2026-08-26 |
| CVE-2026-80195 json | Kimai before 2.63.0 contains a business logic / improper authorization vulnerability in the team update API endpoint (PATCH /... | Not Provided | 2026-08-26 | 2026-08-26 |
| CVE-2026-44298 json | Not Provided | 2026-05-08 | 2026-05-08 | |
| CVE-2026-42267 json | Not Provided | 2026-05-08 | 2026-05-13 | |
| CVE-2026-41498 json | Not Provided | 2026-05-08 | 2026-05-12 | |
| CVE-2026-40486 json | Not Provided | 2026-04-17 | 2026-04-27 | |
| CVE-2026-40479 json | Not Provided | 2026-04-17 | 2026-04-27 | |
| CVE-2023-46245 json | Kimai is a web-based multi-user time-tracking application. Versions 2.1.0 and prior are vulnerable to a Server-Side Template ... | 7.2 - HIGH | 2023-10-31 | 2023-11-08 |
| CVE-2021-43515 json | CSV Injection (aka Excel Macro Injection or Formula Injection) exists in creating new timesheet in Kimai. By filling the Desc... | 7.8 - HIGH | 2022-04-08 | 2022-04-14 |
| CVE-2020-19825 json | Cross Site Scripting (XSS) vulnerability in kevinpapst kimai2 1.30.0 in /src/Twig/Runtime/MarkdownExtension.php, allows attac... | 9.6 - CRITICAL | 2023-02-15 | 2023-02-23 |