CVE-2025-10641 Unencrypted cleartext communication in EfficientLab WorkExaminer Professional

All WorkExaminer Professional traffic between monitoring client, console and server is transmitted as plain text. This allows an attacker with access to the network to read the transmitted sensitive data. An attacker can also freely modify the data on the wire. The monitoring clients transmit the...

CVE-2025-10640

The WorkExaminer Professional employee monitoring software is vulnerable to a security flaw due to missing server-side authentication checks . An unauthenticated attacker with access to TCP port 12306 of the WorkExaminer server can exploit this by bypassing the login prompt in the Professional co...

CVE-2025-10639

The WorkExaminer Professional server installation includes an FTP server on TCP port 12304 used for receiving client logs. A vulnerability exists due to the use of weak hardcoded credentials , allowing an attacker with network access to the port to log in and read or modify data and log files. Fu...