Kimai
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 30 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from August 23, 2019 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Kimai before 2.56.0 Authorization Bypass via TimesheetVoter
Kimai before 2.53.0 API Token Leakage via Invoice Template
Kimai before 2.53.0 Open Redirect via RelayState
Kimai before 2.54.0 Username Enumeration via Timing Oracle
Kimai before 2.56.0 Information Disclosure via config() Twig Function
Kimai before 2.57.0 Improper Authorization via Favorite Endpoints
Kimai before 2.58.0 Authentication Bypass via Password Reset Link
Kimai before 2.64.0 Missing Authorization via ProjectViewController export
Kimai before 2.62.0 Authorization Bypass via QuickEntry
Kimai: Arbitrary file read in invoice PDF renderer (admin)
Monitor Kimai in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.