CVE-2020-35604: Kronos Web Time And Attendance

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

An XXE attack can occur in Kronos WebTA 5.0.4 when SAML is used.

Affected products

• Kronos Web Time And Attendance: version 5.0.4 only

Published 2020-12-21. Last modified 2026-06-17.