Path traversal in TmaxSoft JEUS
Priority LOW 37CWE-22Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
JEUS 7 Fix#0~5 and JEUS 8Fix#0~1 versions contains a directory traversal vulnerability caused by improper input parameter check when uploading installation file in administration web page. That leads remote attacker to execute arbitrary code via uploaded file.
Why it matters now
EPSS 0.02676 85th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| TmaxSoft | JEUS | JEUS 7 Fix#0~5, JEUS 8Fix#0~1 | — | No fix listed | CNA |
- JEUS VendorTmaxSoft Affected JEUS 7 Fix#0~5, JEUS 8Fix#0~1 Fixed in — No fix listed CNA
CPE configurations NVD · 4
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:tmaxsoft:jeus:7:fix_0:*:*:*:*:*:* | 7 fix_0 | Vulnerable | TmaxSoft |
| cpe:2.3:a:tmaxsoft:jeus:7:fix_5:*:*:*:*:*:* | 7 fix_5 | Vulnerable | TmaxSoft |
| cpe:2.3:a:tmaxsoft:jeus:8:fix_0:*:*:*:*:*:* | 8 fix_0 | Vulnerable | TmaxSoft |
| cpe:2.3:a:tmaxsoft:jeus:8:fix_1:*:*:*:*:*:* | 8 fix_1 | Vulnerable | TmaxSoft |
- cpe:2.3:a:tmaxsoft:jeus:7:fix_0:*:*:*:*:*:* Versions 7 fix_0 Vulnerable ·TmaxSoft
- cpe:2.3:a:tmaxsoft:jeus:7:fix_5:*:*:*:*:*:* Versions 7 fix_5 Vulnerable ·TmaxSoft
- cpe:2.3:a:tmaxsoft:jeus:8:fix_0:*:*:*:*:*:* Versions 8 fix_0 Vulnerable ·TmaxSoft
- cpe:2.3:a:tmaxsoft:jeus:8:fix_1:*:*:*:*:*:* Versions 8 fix_1 Vulnerable ·TmaxSoft
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2019-17327
- 2026-10-03 Alias added: GHSA-w85q-2j4x-rcxm
More TmaxSoft Jeus vulnerabilities
- TI-2008-06218 NTFS TmaxSoft JEUS 5 before Fix 26 allows remote attackers to read the source code for… CVSS 2.0MEDIUM 5.0
Sources
- CVE-2019-17327 · CVE Program
- CVE-2019-17327 · NVD
- FIRST EPSS
- GHSA-w85q-2j4x-rcxm · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences