How severe is CVE-2020-7815?

CVE-2020-7815 has a CVSS 3.x base score of 7.8, rated high severity. It is exploitable over local access with low attack complexity, requires no privileges and user interaction. Impact on confidentiality is high, integrity high, and availability high.

Is CVE-2020-7815 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (64th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2020-7815?

CVE-2020-7815 affects Tobesoft Xplatform. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2020-7815?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2020-7815 published?

CVE-2020-7815 was published on 2020-07-10 and last updated on 2026-06-17.

CVE-2020-7815

CVE-2020-7815 is a high-severity vulnerability in Tobesoft Xplatform with a CVSS 3.x base score of 7.8. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: High (CVSS 3.x base score 7.8)
CVSS v2: 7.5
EPSS exploit prediction: 1% (64th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Tobesoft Xplatform
Published: 2020-07-10
Last modified: 2026-06-17

Description

XPLATFORM v9.2.260 and eariler versions contain a vulnerability that could allow remote files to be downloaded by setting the arguments to the vulnerable method. this can be leveraged for code execution. File download vulnerability in ____COMPONENT____ of TOBESOFT XPLATFORM allows ____ATTACKER/ATTACK____ to cause ____IMPACT____. This issue affects: TOBESOFT XPLATFORM 9.2.250 versions prior to 9.2.260 on Windows.

Frequently asked questions

What is CVE-2020-7815?: XPLATFORM v9.2.260 and eariler versions contain a vulnerability that could allow remote files to be downloaded by setting the arguments to the vulnerable method. this can be leveraged for code execution. File download vulnerability in ____COMPONENT____ of TOBESOFT XPLATFORM allows ____ATTACKER/ATTACK____ to cause ____IMPACT____. This issue affects: TOBESOFT XPLATFORM 9.2.250 versions prior to 9.2.260 on Windows.
How severe is CVE-2020-7815?: CVE-2020-7815 has a CVSS 3.x base score of 7.8, rated high severity. It is exploitable over local access with low attack complexity, requires no privileges and user interaction. Impact on confidentiality is high, integrity high, and availability high.
Is CVE-2020-7815 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (64th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2020-7815?: CVE-2020-7815 affects Tobesoft Xplatform. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2020-7815?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2020-7815 published?: CVE-2020-7815 was published on 2020-07-10 and last updated on 2026-06-17.

References

Affected products (1)

cpe:2.3:a:tobesoft:xplatform:*:*:*:*:*:*:*:*

More vulnerabilities in Tobesoft Xplatform

CVE-2021-26629 — High (CVSS 8.8): A path traversal vulnerability in XPLATFORM's runtime archive function could lead to arbitrary file creation. When the…
CVE-2020-7866 — High (CVSS 8.8): When using XPLATFORM 9.2.2.270 or earlier versions ActiveX component, arbitrary commands can be executed due to…
CVE-2020-7841 — High (CVSS 8.8): Improper input validation vulnerability exists in TOBESOFT XPLATFORM which could cause arbitrary .hta file execution…
CVE-2021-26626 — High (CVSS 8.1): Improper input validation vulnerability in XPLATFORM's execBrowser method can cause execute arbitrary commands. IF the…
CVE-2019-19162 — High (CVSS 7.8): A use-after-free vulnerability in the TOBESOFT XPLATFORM versions 9.1 to 9.2.2 may lead to code execution on a system…
CVE-2020-7806 — High (CVSS 7.8): Tobesoft Xplatform 9.2.2.250 and earlier version have an arbitrary code execution vulnerability by using method…

All CVEs affecting Tobesoft Xplatform →