cve.bz

CVE-2020-7874

8.8 highEPSS 0.6%

High (8.8) in tobesoft nexacro. EPSS 0.6% chance of exploitation in the next 30 days.

Download of code without integrity check vulnerability in NEXACRO14 Runtime ActiveX control of tobesoft Co., Ltd allows the attacker to cause an arbitrary file download and execution. This vulnerability is due to incomplete validation of file download URL or file extension.

Severity

CVSS 3.1

8.8 high
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.6% chance of exploitation in the next 30 days; higher than 47% of CVEs (scores of 2026-10-31)
CWE
CWE-494
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON