CVE-2020-7806: Tobesoft Xplatform

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Tobesoft Xplatform 9.2.2.250 and earlier version have an arbitrary code execution vulnerability by using method supported by Xplatform ActiveX Control. It allows attacker to cause remote code execution.

Affected products

• Tobesoft Xplatform: up to and including 9.2.2.250

Published 2020-05-06. Last modified 2026-06-17.