Search vulnerabilities

Results 4

Export CSV
CVE-2023-26759

Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an OS command injection vulnerability via calls made to the XMService component.

CVSS 3.1 · 8.8 High EPSS 2.4% KEV · Not listed
Vendors
Products
Erp
CVE-2023-26760

Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an information disclosure vulnerability via the /debug endpoint. This vulnerability allows attackers to access cleartext credentials needed to authenticate to the AS400 system.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Products
Erp
CVE-2023-26762

Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an arbitrary file upload vulnerability.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Products
Erp
CVE-2023-26758

Sme.UP TOKYO V6R1M220406 was discovered to contain an arbitrary file download vulnerabilty via the component /ResourceService.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Products
Erp