AndSoft vulnerabilities and threats

40 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	5.1	EPSS 0.2%	CVE-2025-59774AndSoft e-TMS · XSS or 'Cross-site Scripting' Medium5.1EPSS 0.2%2025-10-02CVE Database V5CVE-2025-59774 Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_VON.ASP'. EPSS 0.2%Vulnerability CWE-79	CVE Database V5	2025-10-02
Medium	5.1	EPSS 0.2%	CVE-2025-59773AndSoft e-TMS · XSS or 'Cross-site Scripting' Medium5.1EPSS 0.2%2025-10-02CVE Database V5CVE-2025-59773 Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_TP.ASP'. EPSS 0.2%Vulnerability CWE-79	CVE Database V5	2025-10-02
Medium	5.1	EPSS 0.2%	CVE-2025-59772AndSoft e-TMS · XSS or 'Cross-site Scripting' Medium5.1EPSS 0.2%2025-10-02CVE Database V5CVE-2025-59772 Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_SIL.ASP'. EPSS 0.2%Vulnerability CWE-79	CVE Database V5	2025-10-02
Medium	5.1	EPSS 0.2%	CVE-2025-59771AndSoft e-TMS · XSS or 'Cross-site Scripting' Medium5.1EPSS 0.2%2025-10-02CVE Database V5CVE-2025-59771 Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_MRK.ASP'. EPSS 0.2%Vulnerability CWE-79	CVE Database V5	2025-10-02
Medium	5.1	EPSS 0.2%	CVE-2025-59770AndSoft e-TMS · XSS or 'Cross-site Scripting' Medium5.1EPSS 0.2%2025-10-02CVE Database V5CVE-2025-59770 Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_MON.ASP'. EPSS 0.2%Vulnerability CWE-79	CVE Database V5	2025-10-02
Medium	5.1	EPSS 0.2%	CVE-2025-59769AndSoft e-TMS · XSS or 'Cross-site Scripting' Medium5.1EPSS 0.2%2025-10-02CVE Database V5CVE-2025-59769 Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_MOL.ASP'. EPSS 0.2%Vulnerability CWE-79	CVE Database V5	2025-10-02
Medium	5.1	EPSS 0.2%	CVE-2025-59768AndSoft e-TMS · XSS or 'Cross-site Scripting' Medium5.1EPSS 0.2%2025-10-02CVE Database V5CVE-2025-59768 Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_MNG.ASP'. EPSS 0.2%Vulnerability CWE-79	CVE Database V5	2025-10-02
Medium	5.1	EPSS 0.2%	CVE-2025-59767AndSoft e-TMS · XSS or 'Cross-site Scripting' Medium5.1EPSS 0.2%2025-10-02CVE Database V5CVE-2025-59767 Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_LVE.ASP'. EPSS 0.2%Vulnerability CWE-79	CVE Database V5	2025-10-02
Medium	5.1	EPSS 0.2%	CVE-2025-59766AndSoft e-TMS · XSS or 'Cross-site Scripting' Medium5.1EPSS 0.2%2025-10-02CVE Database V5CVE-2025-59766 Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_LT.ASP'. EPSS 0.2%Vulnerability CWE-79	CVE Database V5	2025-10-02
Medium	5.1	EPSS 0.2%	CVE-2025-59765AndSoft e-TMS · XSS or 'Cross-site Scripting' Medium5.1EPSS 0.2%2025-10-02CVE Database V5CVE-2025-59765 Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_LF.ASP'. EPSS 0.2%Vulnerability CWE-79	CVE Database V5	2025-10-02
Medium	5.1	EPSS 0.2%	CVE-2025-59764AndSoft e-TMS · XSS or 'Cross-site Scripting' Medium5.1EPSS 0.2%2025-10-02CVE Database V5CVE-2025-59764 Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_FCC.ASP'. EPSS 0.2%Vulnerability CWE-79	CVE Database V5	2025-10-02
Medium	5.1	EPSS 0.2%	CVE-2025-59763AndSoft e-TMS · XSS or 'Cross-site Scripting' Medium5.1EPSS 0.2%2025-10-02CVE Database V5CVE-2025-59763 Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_EK.ASP'. EPSS 0.2%Vulnerability CWE-79	CVE Database V5	2025-10-02
Medium	5.1	EPSS 0.2%	CVE-2025-59762AndSoft e-TMS · XSS or 'Cross-site Scripting' Medium5.1EPSS 0.2%2025-10-02CVE Database V5CVE-2025-59762 Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_DLG.ASP'. EPSS 0.2%Vulnerability CWE-79	CVE Database V5	2025-10-02
Medium	5.1	EPSS 0.2%	CVE-2025-59761AndSoft e-TMS · XSS or 'Cross-site Scripting' Medium5.1EPSS 0.2%2025-10-02CVE Database V5CVE-2025-59761 Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_DLG.ASP'. EPSS 0.2%Vulnerability CWE-79	CVE Database V5	2025-10-02
Medium	5.1	EPSS 0.2%	CVE-2025-59760AndSoft e-TMS · XSS or 'Cross-site Scripting' Medium5.1EPSS 0.2%2025-10-02CVE Database V5CVE-2025-59760 Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_DHL.ASP'. EPSS 0.2%Vulnerability CWE-79	CVE Database V5	2025-10-02
Medium	5.1	EPSS 0.2%	CVE-2025-59759AndSoft e-TMS · XSS or 'Cross-site Scripting' Medium5.1EPSS 0.2%2025-10-02CVE Database V5CVE-2025-59759 Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_DELCROIX.ASP'. EPSS 0.2%Vulnerability CWE-79	CVE Database V5	2025-10-02
Medium	5.1	EPSS 0.2%	CVE-2025-59758AndSoft e-TMS · XSS or 'Cross-site Scripting' Medium5.1EPSS 0.2%2025-10-02CVE Database V5CVE-2025-59758 Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_CYLOG.ASP'. EPSS 0.2%Vulnerability CWE-79	CVE Database V5	2025-10-02
Medium	5.1	EPSS 0.2%	CVE-2025-59757AndSoft e-TMS · XSS or 'Cross-site Scripting' Medium5.1EPSS 0.2%2025-10-02CVE Database V5CVE-2025-59757 Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_CATOLD.ASP'. EPSS 0.2%Vulnerability CWE-79	CVE Database V5	2025-10-02
Medium	5.1	EPSS 0.2%	CVE-2025-59756AndSoft e-TMS · XSS or 'Cross-site Scripting' Medium5.1EPSS 0.2%2025-10-02CVE Database V5CVE-2025-59756 Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in 'SuppConn in /clt/LOGINFRM_CON.ASP'. EPSS 0.2%Vulnerability CWE-79	CVE Database V5	2025-10-02
Medium	6.9	EPSS 0.2%	CVE-2025-59755AndSoft e-TMS · XSS or 'Cross-site Scripting' Medium6.9EPSS 0.2%2025-10-02CVE Database V5CVE-2025-59755 Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_CAT.ASP'. EPSS 0.2%Vulnerability CWE-79	CVE Database V5	2025-10-02

Page 1 of 2