Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2023-26762

Disclosure Date: February 27, 2023 (last updated October 08, 2023)
Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an arbitrary file upload vulnerability.
Attacker Value
Unknown

CVE-2023-26760

Disclosure Date: February 27, 2023 (last updated October 08, 2023)
Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an information disclosure vulnerability via the /debug endpoint. This vulnerability allows attackers to access cleartext credentials needed to authenticate to the AS400 system.
Attacker Value
Unknown

CVE-2023-26759

Disclosure Date: February 27, 2023 (last updated October 08, 2023)
Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an OS command injection vulnerability via calls made to the XMService component.
Attacker Value
Unknown

CVE-2023-26758

Disclosure Date: February 27, 2023 (last updated October 08, 2023)
Sme.UP TOKYO V6R1M220406 was discovered to contain an arbitrary file download vulnerabilty via the component /ResourceService.