Approved changes feed: RSS · Atom

cpe:2.3:a:rubikon_teknoloji:easy_transfer:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRubikon Teknoloji (4edc363a-e5a4-543c-a086-c414b8394bdf)
ProductEasy Transfer (c03b2edd-7cf3-56cc-9073-607147e1e49e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-37087 vulnerable 2026-06-08 05:25:50.130163 Easy Transfer 1.7 for iOS - Persistent Cross-Site Scripting
Easy Transfer Wifi Transfer v1.7 for iOS contains a persistent cross-site scripting vulnerability that allows remote attackers to inject malicious scripts by manipulating the oldPath, newPath, and path parameters in Create Folder and Move/Edit functions. Attackers can exploit improper input validation via POST requests to execute arbitrary JavaScript in the context of the mobile web application.
Published: 2026-02-03T22:09:48.283Z
Updated: 2026-02-04T14:52:11.245Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-37086 vulnerable 2026-06-08 05:25:50.129745 Easy Transfer 1.7 for iOS - Directory Traversal
MEDIUM (6.2)
Easy Transfer 1.7 iOS mobile application contains a directory traversal vulnerability that allows remote attackers to access unauthorized file system paths without authentication. Attackers can exploit the vulnerability by manipulating path parameters in GET and POST requests to list or download sensitive system files and inject malicious scripts into application parameters.
Published: 2026-02-03T22:01:48.056Z
Updated: 2026-02-04T21:06:10.702Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.