Read the docs

TOBESOFT

Records21All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical11CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9

Exploited now

TOBESOFT records in CISA KEV

No TOBESOFT vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Xplatform 11 records MEDIUM Nexacro 6 records MEDIUM Miplatform 1 record MEDIUM

Records

6 records in Nexacro · all components

TI-2021-08325 CVE-2021-26607 · GHSA-2895-rp2x-mg63

TOBESOFT NEXACRO17 arbitrary command execution vulnerability

Priority MEDIUM 46

An Improper input validation in execDefaultBrowser method of NEXACRO17 allows a remote attacker to execute arbitrary command on affected systems.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01868 Published 2021-10-26 No fix listed CWE-20
TI-2019-13822 CVE-2019-19167 · GHSA-c3mj-6473-8rrx

Tobesoft Nexacro14 ActiveX File Download Vulnerability

Priority MEDIUM 43

Tobesoft Nexacro v2019.9.25.1 and earlier version have an arbitrary code execution vulnerability by using method supported by Nexacro14 ActiveX Control.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00748 Published 2020-05-06 No fix listed CWE-494
TI-2021-08343 CVE-2021-26625 · GHSA-26r2-6q54-995j

tobesoft Nexacro arbitrary file download vulnerability

Priority LOW 39

Insufficient Verification of input Data leading to arbitrary file download and execute was discovered in Nexacro platform.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00628 Published 2022-04-19 No fix listed CWE-345
TI-2020-06379 CVE-2020-7874 · GHSA-8qf8-7w4h-xrpc

NEXACRO14 Runtime arbitrary file download and execution vulnerability

Priority LOW 39

Download of code without integrity check vulnerability in NEXACRO14 Runtime ActiveX control of tobesoft Co., Ltd allows the attacker to cause an arbitrary file download and execution.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00584 Published 2021-09-09 Fixed in 14.0.1.3600 CWE-494
TI-2021-08331 CVE-2021-26613 · GHSA-f5cg-29r6-xgxh

tobesoft nexacro arbitrary file creation vulnerability

Priority LOW 37

improper input validation vulnerability in nexacro permits copying file to the startup folder using rename method.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00831 Published 2022-02-09 No fix listed CWE-20
Open these records in search →