N-i-agroinformatics Soy Cms — known CVE vulnerabilities

Every CVE whose affected-product data names N-i-agroinformatics Soy Cms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2017-2163 — CVSS 7.5 (high): Directory traversal vulnerability in SOY CMS Ver.1.8.1 to Ver.1.8.12 allows authenticated attackers to read arbitrary files via shop_id.
• CVE-2017-2164 — CVSS 6.1 (medium): Cross-site scripting vulnerability in SOY CMS with installer 1.8.12 and earlier allows remote attackers to inject arbitrary web script or…
• CVE-2014-1998 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in Nippon Institute of Agroinformatics SOY CMS 1.4.0c and earlier allows remote attackers to…