10 matches found
CVE-2023-26760
Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an information disclosure vulnerability via the /debug endpoint. This vulnerability allows attackers to access cleartext credentials needed to authenticate to the AS400 system...
CVE-2023-26762
Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an arbitrary file upload vulnerability...
Command injection
Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an OS command injection vulnerability via calls made to the XMService component...
Privilege escalation
Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an arbitrary file upload vulnerability...
CVE-2023-26762
Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an arbitrary file upload vulnerability...
PT-2023-20785 · Unknown · Sme.Up Erp Tokyo
Name of the Vulnerable Software and Affected Versions: Sme.UP ERP TOKYO version V6R1M220406 Description: The issue is related to an arbitrary file upload vulnerability. Recommendations: For Sme.UP ERP TOKYO version V6R1M220406, at the moment, there is no information about a newer version that...
CVE-2023-26760
Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an information disclosure vulnerability via the /debug endpoint. This vulnerability allows attackers to access cleartext credentials needed to authenticate to the AS400 system...
CVE-2023-26759: Improper Neutralization of Special Elements used in an OS Command
Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an OS command injection vulnerability via calls made to the XMService component...
CVE-2023-26760: Cleartext Storage of Sensitive Information
Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an information disclosure vulnerability via the /debug endpoint. This vulnerability allows attackers to access cleartext credentials needed to authenticate to the AS400 system...