Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Nexaweb Clear all filters
TI-2020-06334 CVE-2020-7820 · GHSA-584w-v2rw-69v4

Tobesoft NEXACRO14/17 ExCommonApiV13 Arbitrary Code Execution Vulnerability

Priority MEDIUM 45

Nexacro14/17 ExtCommonApiV13 Library under 2019.9.6 version contain a vulnerability that could allow remote attacker to execute arbitrary code by setting the arguments to the vulnerable API.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0161 Published 2020-07-02 Fixed in 2019.9.6 CWE-20
TI-2020-06335 CVE-2020-7821 · GHSA-622h-q3gf-f25p

Tobesoft NEXACRO14/17 ExCommonApiV13 Arbitrary Code Execution Vulnerability

Priority MEDIUM 45

Nexacro14/17 ExtCommonApiV13 Library under 2019.9.6 version contain a vulnerability that could allow remote attacker to execute arbitrary code by modifying the value of registry path.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0161 Published 2020-07-02 Fixed in 2019.9.6 CWE-20