40
CVEs
9
Critical
2
High
0
KEV
5
PoC
11
Unpatched C/H
0.0%
Patch Rate
0.1%
Avg EPSS
Severity Breakdown
CRITICAL
9
HIGH
2
MEDIUM
29
LOW
0
Monthly CVE Trend
Affected Products (1)
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2025-59736 | OS command injection in AndSoft e-TMS v25.03 transportation management system. One of 8+ critical command injection CVEs in the same product. | CRITICAL | 9.8 | 0.2% | 69 |
PoC
No patch
|
| CVE-2025-59737 | OS command injection in AndSoft e-TMS v25.03 transportation management system. One of 8+ critical command injection CVEs in the same product. | CRITICAL | 9.8 | 0.2% | 69 |
PoC
No patch
|
| CVE-2025-59738 | OS command injection in AndSoft e-TMS v25.03 transportation management system. One of 8+ critical command injection CVEs in the same product. | CRITICAL | 9.8 | 0.2% | 69 |
PoC
No patch
|
| CVE-2025-59739 | OS command injection in AndSoft e-TMS v25.03 transportation management system. One of 8+ critical command injection CVEs in the same product. | CRITICAL | 9.8 | 0.2% | 69 |
PoC
No patch
|
| CVE-2025-59740 | OS command injection in AndSoft e-TMS v25.03 transportation management system. One of 8+ critical command injection CVEs in the same product. | CRITICAL | 9.8 | 0.2% | 69 |
PoC
No patch
|
| CVE-2025-59735 | OS command injection in AndSoft e-TMS v25.03 transportation management system. One of 8+ critical command injection CVEs in the same product. | CRITICAL | 9.8 | 0.2% | 49 |
No patch
|
| CVE-2025-59741 | OS command injection in AndSoft e-TMS v25.03 transportation management system. One of 8+ critical command injection CVEs in the same product. | CRITICAL | 9.8 | 0.2% | 49 |
No patch
|
| CVE-2025-59742 | SQL injection in AndSoft e-TMS v25.03 allows database compromise. | CRITICAL | 9.8 | 0.0% | 49 |
No patch
|
| CVE-2025-59743 | SQL injection in AndSoft e-TMS v25.03 allows database compromise. | CRITICAL | 9.8 | 0.0% | 49 |
No patch
|
| CVE-2025-59744 | Path traversal vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to access files only within the web root using the “docurl” parameter in “/lib/asp/DOCSAVEASASP.ASP”. | HIGH | 7.5 | 0.1% | 38 |
No patch
|
| CVE-2025-59745 | Vulnerability in the cryptographic algorithm of AndSoft's e-TMS v25.03, which uses MD5 to encrypt passwords. MD5 is a cryptographically vulnerable hash algorithm and is no longer considered secure for storing or transmitting passwords. It is vulnerable to collision attacks and can be easily cracked with modern hardware, exposing user credentials to potential risks. | HIGH | 7.5 | 0.0% | 38 |
No patch
|
| CVE-2025-59746 | Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'm' parameter in '/lib/asp/alert.asp'. | MEDIUM | 6.1 | 0.0% | 31 |
No patch
|
| CVE-2025-59747 | Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l' parameter in '/clt/resetPassword.asp'. | MEDIUM | 6.1 | 0.0% | 31 |
No patch
|
| CVE-2025-59748 | Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l' and 'reset' parameters in '/clt/changepassword.asp'. | MEDIUM | 6.1 | 0.0% | 31 |
No patch
|
| CVE-2025-59749 | Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l' parameter in '/clt/TRACK_REQUEST.ASP'. | MEDIUM | 6.1 | 0.0% | 31 |
No patch
|