Smeup

smeup

4 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-26762 1Smeup 1Erp Nov 21, 2024 Feb 27, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an arbitrary file upload vulnerability.
CVE-2023-26760 1Smeup 1Erp Nov 21, 2024 Feb 27, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an information disclosure vulnerability via the /debug endpoint. This vulnerability allows attackers to access cleartext credentials needed to authenticate to the AS...Show more Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an information disclosure vulnerability via the /debug endpoint. This vulnerability allows attackers to access cleartext credentials needed to authenticate to the AS400 system.Show less
CVE-2023-26759 1Smeup 1Erp Nov 21, 2024 Feb 27, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an OS command injection vulnerability via calls made to the XMService component.
CVE-2023-26758 1Smeup 1Erp Mar 10, 2025 Feb 27, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Sme.UP TOKYO V6R1M220406 was discovered to contain an arbitrary file download vulnerabilty via the component /ResourceService.