Vulnerabilities

TI-2023-25275 CVE-2023-46802 · GHSA-f8v5-2g96-j9mq

XML external entity injection in National Tax Agency e-Tax software

LOW 24

e-Tax software Version3.0.10 and earlier improperly restricts XML external entity references (XXE) due to the configuration of the embedded XML parser.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00211 Published 2023-11-06 No fix listed CWE-611

TI-2020-04570 CVE-2020-5601 · GHSA-63vc-qfc7-c7pg

Command injection in National Tax Agency Chrome Extension for e-Tax Reception System

MEDIUM 41

Chrome Extension for e-Tax Reception System Ver1.0.0.0 allows remote attackers to execute an arbitrary command via unspecified vectors.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01587 Published 2020-06-30 No fix listed CWE-77

TI-2017-01516 CVE-2017-2226 · GHSA-f52f-8ffp-vg49

Untrusted search path in National Tax Agency Setup file of advance preparation for e-Tax…

LOW 36

Untrusted search path vulnerability in Setup file of advance preparation for e-Tax software (WEB version) (1.17.1) and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01109 Published 2017-07-07 No fix listed CWE-426

Vulnerabilities

Filters

XML external entity injection in National Tax Agency e-Tax software

Command injection in National Tax Agency Chrome Extension for e-Tax Reception System

Untrusted search path in National Tax Agency Setup file of advance preparation for e-Tax…