PatchTheCVEtobesoft vulnerabilities
Recent CVEs affecting tobesoft products. 10 tracked.
tobesoft has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 10. Most recent: 2022-04-26. Highest priority: CVE-2021-26629 (score 50/100).
- CVE-2021-26629 HIGH 8.8 UPGRADE A path traversal vulnerability in XPLATFORM's runtime archive function could lead to arbitrary file creation
- CVE-2021-26626 HIGH 8.1 UPGRADE Improper input validation vulnerability in XPLATFORM's execBrowser method can cause execute arbitrary commands
- CVE-2021-26625 HIGH 8.8 UPGRADE Insufficient Verification of input Data leading to arbitrary file download and execute was discovered in Nexac
- CVE-2021-26613 HIGH 8.1 UPGRADE improper input validation vulnerability in nexacro permits copying file to the startup folder using rename met
- CVE-2021-26612 HIGH 8.1 UPGRADE An improper input validation leading to arbitrary file creation was discovered in copy method of Nexacro platf
- CVE-2021-26607 HIGH 8.1 UPGRADE An Improper input validation in execDefaultBrowser method of NEXACRO17 allows a remote attacker to execute arb
- CVE-2020-7874 HIGH 8.8 UPGRADE Download of code without integrity check vulnerability in NEXACRO14 Runtime ActiveX control of tobesoft Co., L
- CVE-2020-7866 HIGH 8.8 UPGRADE When using XPLATFORM 9.2.2.270 or earlier versions ActiveX component, arbitrary commands can be executed due t
- CVE-2020-7857 HIGH 7.5 UPGRADE A vulnerability of XPlatform could allow an unauthenticated attacker to execute arbitrary command
- CVE-2020-7853 MEDIUM 5.5 UPGRADE An outbound read/write vulnerability exists in XPLATFORM that does not check offset input ranges, allowing out
FAQ
How do I fix tobesoft vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is tobesoft being exploited right now?
None of the tracked tobesoft CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which tobesoft CVE should I patch first?
CVE-2021-26629 currently ranks highest (50/100): A path traversal vulnerability in XPLATFORM's runtime archive function could lead to arbitrary file creation.