Mobatime vulnerabilities
We track 5 vulnerabilities in Mobatime products across 4 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on May 27, 2025.
Latest Mobatime vulnerabilities
- 9.3 Critical severity
AMX MTAPI: Missing Authentication for Critical Functionality
Missing Authentication & Authorization in Web-API in Mobatime AMX MTAPI v6 on IIS allows adversaries to unrestricted access via the network. The vulnerability is fixed in Version 1.5.
- 8.1 High severity
Mobatime mobile application AMXGT100: Authorization Bypass Through User-Controlled Key
Incorrect Authorization vulnerability in Mobatime mobile application AMXGT100 allows a low-privileged user to impersonate anyone else, including administratorsThis issue affects Mobatime mobile application AMXGT100: through 1.3.20.
- 9.1 Critical severity
Mobatime mobile application AMXGT100: Improper Authentication
Improper Authentication vulnerability in Mobatime mobile application AMXGT100 allows Authentication Bypass.This issue affects Mobatime mobile application AMXGT100 through 1.3.20.
- 8.8 High severity
Mobatime web application: Incorrect Authorization
Incorrect Authorization vulnerability in Mobatime web application allows Privilege Escalation, Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mobatime web application: through 06.7.22.
- 8.8 High severity
Mobatime web application: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type vulnerability in Mobatime web application (Documentary proof upload modules) allows a malicious user to Upload a Web Shell to a Web Server.This issue affects Mobatime web application: through 06.7.22.