Known Vulnerabilities for Xplatform by Tobesoft
Listed below are 10 of the newest known vulnerabilities associated with "Xplatform" by "Tobesoft".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2021-26629 json | A path traversal vulnerability in XPLATFORM's runtime archive function could lead to arbitrary file creation. When the .xzip ... | 8.8 - HIGH | 2022-04-26 | 2022-05-06 |
| CVE-2021-26626 json | Improper input validation vulnerability in XPLATFORM's execBrowser method can cause execute arbitrary commands. IF the second... | 8.8 - HIGH | 2022-04-19 | 2022-04-27 |
| CVE-2020-7866 json | When using XPLATFORM 9.2.2.270 or earlier versions ActiveX component, arbitrary commands can be executed due to improper inpu... | 9.8 - CRITICAL | 2021-07-20 | 2021-07-29 |
| CVE-2020-7857 json | A vulnerability of XPlatform could allow an unauthenticated attacker to execute arbitrary command. This vulnerability exists ... | 9.8 - CRITICAL | 2021-04-20 | 2021-04-29 |
| CVE-2020-7853 json | An outbound read/write vulnerability exists in XPLATFORM that does not check offset input ranges, allowing out-of-range data ... | 9.8 - CRITICAL | 2021-03-24 | 2021-03-26 |
| CVE-2020-7841 json | Improper input validation vulnerability exists in TOBESOFT XPLATFORM which could cause arbitrary .hta file execution when the... | 8.8 - HIGH | 2020-11-17 | 2020-12-02 |
| CVE-2020-7815 json | XPLATFORM v9.2.260 and eariler versions contain a vulnerability that could allow remote files to be downloaded by setting the... | 9.8 - CRITICAL | 2020-07-10 | 2021-07-21 |
| CVE-2020-7806 json | Tobesoft Xplatform 9.2.2.250 and earlier version have an arbitrary code execution vulnerability by using method supported by ... | 9.8 - CRITICAL | 2020-05-06 | 2020-05-12 |
| CVE-2019-19166 json | Tobesoft XPlatform v9.1, 9.2.0, 9.2.1 and 9.2.2 have a vulnerability that can load unauthorized DLL files. It allows attacker... | 7.8 - HIGH | 2020-05-06 | 2020-05-07 |
| CVE-2019-19162 json | A use-after-free vulnerability in the TOBESOFT XPLATFORM versions 9.1 to 9.2.2 may lead to code execution on a system running... | 7.8 - HIGH | 2020-05-11 | 2020-05-14 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Tobesoft | Xplatform | 9.2.2.260 | |||
| Application | Tobesoft | Xplatform | 9.2.2.250 | |||
| Application | Tobesoft | Xplatform | 9.2.2 | |||
| Application | Tobesoft | Xplatform | 9.2.1 | |||
| Application | Tobesoft | Xplatform | 9.2.0 | |||
| Application | Tobesoft | Xplatform | 9.2 | |||
| Application | Tobesoft | Xplatform | 9.1 | |||
| Application | Tobesoft | Xplatform | - |