Read the docs

Nexaweb

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Nexaweb records in CISA KEV

No Nexaweb vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Nexacro 14 2 records MEDIUM Nexacro 17 2 records MEDIUM

Records

2 records

TI-2020-06335 CVE-2020-7821 · GHSA-622h-q3gf-f25p

Tobesoft NEXACRO14/17 ExCommonApiV13 Arbitrary Code Execution Vulnerability

Priority MEDIUM 45

Nexacro14/17 ExtCommonApiV13 Library under 2019.9.6 version contain a vulnerability that could allow remote attacker to execute arbitrary code by modifying the value of registry path.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0161 Published 2020-07-02 Fixed in 2019.9.6 CWE-20
TI-2020-06334 CVE-2020-7820 · GHSA-584w-v2rw-69v4

Tobesoft NEXACRO14/17 ExCommonApiV13 Arbitrary Code Execution Vulnerability

Priority MEDIUM 45

Nexacro14/17 ExtCommonApiV13 Library under 2019.9.6 version contain a vulnerability that could allow remote attacker to execute arbitrary code by setting the arguments to the vulnerable API.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0161 Published 2020-07-02 Fixed in 2019.9.6 CWE-20
Open these records in search →