Vulnerabilities

TI-2023-11760 CVE-2023-26762 · GHSA-6hj9-p54q-6q9p

Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an arbitrary file upload vulnerability.

HIGH 73

Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an arbitrary file upload vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00973 Published 2023-02-27 No fix listed CWE-434

TI-2023-11759 CVE-2023-26760 · GHSA-23f5-gr55-w97f

HIGH 72

Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an information disclosure vulnerability via the /debug endpoint.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00518 Published 2023-02-27 No fix listed CWE-312

TI-2023-11758 CVE-2023-26759 · GHSA-2f4f-67fq-rw74

HIGH 73

Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an OS command injection vulnerability via calls made to the XMService component.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02377 Published 2023-02-27 No fix listed CWE-78

TI-2023-11757 CVE-2023-26758 · GHSA-f93w-237m-4cjv

HIGH 66

Sme.UP TOKYO V6R1M220406 was discovered to contain an arbitrary file download vulnerabilty via the component /ResourceService.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00935 Published 2023-02-27 No fix listed CWE-22