TOBESOFT
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| XPLATFORM | 5 | – | Jul 20, 2021 |
| NEXACRO14/17 ExCommonApiV13 | 2 | – | Jul 2, 2020 |
| NEXACRO17 | 2 | – | Nov 30, 2021 |
| MiPlatform 320, 320U, 330, 330U | 1 | – | Jul 17, 2020 |
| NEXACRO14 | 1 | – | Sep 9, 2021 |
| XPLATFORM XPlatformLib922.dll | 1 | – | Nov 17, 2020 |
Exploited and recent CVEs
- CVE-2021-26612 tobesoft Nexacro platform arbitrary file creation vulnerability 1.2%
- CVE-2021-26607 TOBESOFT NEXACRO17 arbitrary command execution vulnerability 1.9%
- CVE-2020-7874 NEXACRO14 Runtime arbitrary file download and execution vulnerability 0.6%
- CVE-2020-7866 Tobesoft XPLATFORM Arbitrary Command Execution Vulnerability 1.0%
- CVE-2020-7857 A vulnerability of XPlatform could allow an unauthenticated attacker to execute arbitrary command. This vulnerability exists due to insufficient validation of improper classes. This issue affects: Tob 1.0%
- CVE-2020-7853 TOBESOFT XPLATFORM Out-of-Bounds Read/Write Vulnerabilities 0.9%
- CVE-2020-7841 TOBESOFT XPLATFORM arbitrary hta file execution vulnerability 1.6%
- CVE-2020-7825 A vulnerability exists that could allow the execution of operating system commands on systems running MiPlatform 2019.05.16 and earlier. An attacker could execute arbitrary remote command by sending p 2.1%
- CVE-2020-7815 XPLATFORM v9.2.260 and eariler versions contain a vulnerability that could allow remote files to be downloaded by setting the arguments to the vulnerable method. this can be leveraged for code executi 1.2%
- CVE-2020-7820 Tobesoft NEXACRO14/17 ExCommonApiV13 Arbitrary Code Execution Vulnerability 1.6%
- CVE-2020-7821 Tobesoft NEXACRO14/17 ExCommonApiV13 Arbitrary Code Execution Vulnerability 1.6%
- CVE-2020-7806 Tobesoft Xplatform ActiveX File Download Vulnerability 0.7%