| Reporter | Title | Published | Views | Family All 10 |
|---|---|---|---|---|
 | Toshiba e-STUDIO Security Vulnerability | 14 Jun 202400:00 | – | cnnvd |
 | CVE-2024-27141 Pre-authenticated Time-Based Blind XXE injection | 14 Jun 202402:21 | – | cvelist |
 | EUVD-2024-24382 | 3 Oct 202520:07 | – | euvd |
 | Multiple vulnerabilities in Toshiba Tec and Oki Electric Industry MFPs | 17 Jun 202406:21 | – | jvn |
 | CVE-2024-27141 | 14 Jun 202403:15 | – | nvd |
 | Toshiba Printers Multiple Vulnerabilities (May 2024) | 8 Jul 202400:00 | – | openvas |
 | Toshiba Multi-Function Printers 40 Vulnerabilities | 4 Jul 202400:00 | – | packetstorm |
 | PT-2024-21672 · Toshiba · Toshiba Printers | 14 Jun 202400:00 | – | ptsecurity |
 | CVE-2024-27141: Improper Restriction of Recursive Entity References in DTDs | 14 Jun 202400:00 | – | rapid7 |
 | CVE-2024-27141 Pre-authenticated Time-Based Blind XXE injection | 14 Jun 202402:21 | – | vulnrichment |
[
{
"defaultStatus": "unaffected",
"platforms": [
"Linux"
],
"product": "Toshiba Tec e-Studio multi-function peripheral (MFP)",
"vendor": "Toshiba Tec Corporation",
"versions": [
{
"status": "affected",
"version": "see the reference URL"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| XML payload containing external entity definitions (XXE) in POST body | request body | contentwebserver | Pre-auth XXE DoS/information disclosure via contentwebserver API | CWE-776 |
| Multipart form data with a file and a path name field used for file write (path traversal) | request body | contentwebserver/upload | Pre-auth RCE via arbitrary file upload (path traversal) in contentwebserver/upload | CWE-776 |
| Authenticated/session-based access, exploit to trigger connect-back root shell (PoC) | path | tapy/server/appmgmt/applistDeployed | Pre-auth RCE via appmgmt/applistDeployed exposing remote shell | CWE-776 |
| Upload page for eFiling; insecure file upload vulnerability | path | efiling/UploadFrame.html | Insecure file upload on eFiling frame page | CWE-776 |
| Web form enabling upload of arbitrary files | path | Administration/maintenance/uploadsoft/DriverCustomize.html | Insecure file upload in admin maintenance page | CWE-776 |
| Address book import upload form with path traversal vulnerability | path | Registration/AddressBook/AddrImport.html | Insecure file upload in address book import | CWE-776 |
| Upload forms enabling arbitrary file writes | path | Administration/maintenance/uploadsoft/UnixList.html | Insecure file upload on Unix list page | CWE-776 |
| Certificate upload form vulnerable to arbitrary file write | path | Administration/Security/Certificates/CertUpload.html | Insecure file upload in certificate management | CWE-776 |
| Upload of archives via eFiling; insecure file upload path | path | efiling/UploadArchive.html | Insecure file upload in eFiling archive upload | CWE-776 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 07:19Current
6.1Medium risk
Vulners AI Score6.1
CVSS 3.15.9
EPSS0.01115
SSVC