CVE-2024-55971

Critical severity, CVSS 10.0. EPSS: 0.7% chance of exploitation in the next 30 days.

SQL Injection vulnerability in the default configuration of the Logitime WebClock application <= 5.43.0 allows an unauthenticated user to run arbitrary code on the backend database server.

Published 2025-01-23. Last modified 2026-06-17.