The Ministry of Justice

Products

ProductCVEsExploitedLatest
Applicant Programme1–Jul 25, 2023
Shinseiyo Sogo Soft1–May 10, 2023

Exploited and recent CVEs

  • CVE-2023-32639 Unrated Applicant Programme Ver.7.06 and earlier improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker 0.2%
  • CVE-2023-27527 Low 2.5 Shinseiyo Sogo Soft (7.9A) and earlier improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker. 0.3%