High severity7.8NVD Advisory· Published May 6, 2020· Updated Jun 17, 2026

CVE-2020-7806

Description

Tobesoft Xplatform 9.2.2.250 and earlier version have an arbitrary code execution vulnerability by using method supported by Xplatform ActiveX Control. It allows attacker to cause remote code execution.

Affected products

Tobesoft/XPLATFORM3 versions
cpe:2.3:a:tobesoft:xplatform:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:tobesoft:xplatform:*:*:*:*:*:*:*:*range: <=9.2.2.250
- (no CPE)range: <=9.2.2.250
- (no CPE)range: 9.2.2.250

Patches

Vulnerability mechanics

References

support.tobesoft.co.kr/Support/index.htmlnvdVendor Advisory
www.boho.or.kr/krcert/secNoticeView.donvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000