CVE-2025-9977: E-Payroll 0 through 20250121.0

CVE-2025-9977. EPSS 0.01942 (percentile 0.79808), scored 17-Oct-2026.

Affected technology

E-Payroll · 0 through 20250121.0
Times Software

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Adjacent network · No privileges required · No user interaction required

What an attacker can do

The source says value provided in one of POST parameters sent during the process of logging in to Times Software E-Payroll is not sanitized properly, which allows an unauthenticated attacker to perform DoS attacks. Vendor/CNA’s CVSS 4.0 assessment (base score 5.3/10) rates confidentiality and availability impact as low; integrity impact as none.

Published 18-Oct-2026 20:24 UTC

CWE: CWE-89, CWE-209
CCR priority: 0.5 /100 (P5)
EPSS: 0.01942 · percentile 0.79808 · 2026-10-17
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-18 20:23:06.032219+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2025-9977.html