Vulnerabilities > Tobesoft > Xplatform > 9.2.2.260
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-04-26 | CVE-2021-26629 | Path Traversal vulnerability in Tobesoft Xplatform A path traversal vulnerability in XPLATFORM's runtime archive function could lead to arbitrary file creation. | 6.8 |
| 2022-04-19 | CVE-2021-26626 | Improper Input Validation vulnerability in Tobesoft Xplatform Improper input validation vulnerability in XPLATFORM's execBrowser method can cause execute arbitrary commands. | 5.1 |
| 2021-07-20 | CVE-2020-7866 | Improper Input Validation vulnerability in Tobesoft Xplatform When using XPLATFORM 9.2.2.270 or earlier versions ActiveX component, arbitrary commands can be executed due to improper input validation | 7.5 |
| 2021-04-20 | CVE-2020-7857 | Improper Input Validation vulnerability in Tobesoft Xplatform A vulnerability of XPlatform could allow an unauthenticated attacker to execute arbitrary command. | 7.5 |
| 2020-07-10 | CVE-2020-7815 | Injection vulnerability in Tobesoft Xplatform XPLATFORM v9.2.260 and eariler versions contain a vulnerability that could allow remote files to be downloaded by setting the arguments to the vulnerable method. | 7.5 |