Smeup

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Smeup records in CISA KEV

No Smeup vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Erp · all components

TI-2023-11760 CVE-2023-26762 · GHSA-6hj9-p54q-6q9p

HIGH 73

Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an arbitrary file upload vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00973 Published 2023-02-27 No fix listed CWE-434

TI-2023-11758 CVE-2023-26759 · GHSA-2f4f-67fq-rw74

HIGH 73

Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an OS command injection vulnerability via calls made to the XMService component.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02377 Published 2023-02-27 No fix listed CWE-78

TI-2023-11759 CVE-2023-26760 · GHSA-23f5-gr55-w97f

HIGH 72

Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an information disclosure vulnerability via the /debug endpoint.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00518 Published 2023-02-27 No fix listed CWE-312

TI-2023-11757 CVE-2023-26758 · GHSA-f93w-237m-4cjv

HIGH 66

Sme.UP TOKYO V6R1M220406 was discovered to contain an arbitrary file download vulnerabilty via the component /ResourceService.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00935 Published 2023-02-27 No fix listed CWE-22