CVE-2021-26626

概要

参考情報

• krcert.or.kr/krcert/secNoticeView.do · Third Party Advisory

xplatform のその他の脆弱性

• CVE-2021-26629高 8.8A path traversal vulnerability in XPLATFORM's runtime archive function could lead to arbitrary file creation. When the .xzip archive file is…
• CVE-2020-7866緊急 9.8When using XPLATFORM 9.2.2.270 or earlier versions ActiveX component, arbitrary commands can be executed due to improper input validation
• CVE-2020-7857緊急 9.8A vulnerability of XPlatform could allow an unauthenticated attacker to execute arbitrary command. This vulnerability exists due to insuffic…
• CVE-2020-7853緊急 9.8An outbound read/write vulnerability exists in XPLATFORM that does not check offset input ranges, allowing out-of-range data to be read. An …
• CVE-2020-7841高 8.8Improper input validation vulnerability exists in TOBESOFT XPLATFORM which could cause arbitrary .hta file execution when the command string…