metasoft records
8 published records for vendor metasoft.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-284 Improper Access Control4
- CWE-20 Improper Input Validation1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-287 Improper Authentication1
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
8 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
22Monitor | CVE-2025-7874No exploit | Metasoft 美特软件 MetaCRM env.jsp information disclosuremetasoft · metacrm · CWE-200 | Medium5.5 | — | 0.8% | Jul 20, 2025 |
22Monitor | CVE-2025-7875No exploit | Metasoft 美特软件 MetaCRM debug.jsp improper authenticationmetasoft · metacrm · CWE-287 | Medium5.5 | — | 0.7% | Jul 20, 2025 |
8Monitor | CVE-2025-7876No exploit | Metasoft 美特软件 MetaCRM download.jsp AnalyzeParam deserializationmetasoft · metacrm · CWE-20 | Low2.1 | — | 0.8% | Jul 20, 2025 |
8Monitor | CVE-2025-7879No exploit | Metasoft 美特软件 MetaCRM mobileupload.jsp unrestricted uploadmetasoft · metacrm · CWE-284 | Low2.1 | — | 0.6% | Jul 20, 2025 |
8Monitor | CVE-2025-7877No exploit | Metasoft 美特软件 MetaCRM sendfile.jsp unrestricted uploadmetasoft · metacrm · CWE-284 | Low2.1 | — | 0.6% | Jul 20, 2025 |
8Monitor | CVE-2025-7878No exploit | Metasoft 美特软件 MetaCRM upload2.jsp unrestricted uploadmetasoft · metacrm · CWE-284 | Low2.1 | — | 0.5% | Jul 20, 2025 |
8Monitor | CVE-2025-7873No exploit | Metasoft 美特软件 MetaCRM mcc_login.jsp sql injectionmetasoft · metacrm · CWE-74 | Low2.1 | — | 0.5% | Jul 20, 2025 |
8Monitor | CVE-2025-7880No exploit | Metasoft 美特软件 MetaCRM sendsms.jsp unrestricted uploadmetasoft · metacrm · CWE-284 | Low2.1 | — | 0.4% | Jul 20, 2025 |
- CVE-2025-787422Monitor
Metasoft 美特软件 MetaCRM env.jsp information disclosure
MediumCVSS 5.5No exploitEPSS 1%metasoft · metacrmJul 20, 2025
- CVE-2025-787522Monitor
Metasoft 美特软件 MetaCRM debug.jsp improper authentication
MediumCVSS 5.5No exploitEPSS 1%metasoft · metacrmJul 20, 2025
- CVE-2025-78768Monitor
Metasoft 美特软件 MetaCRM download.jsp AnalyzeParam deserialization
LowCVSS 2.1No exploitEPSS 1%metasoft · metacrmJul 20, 2025
- CVE-2025-78798Monitor
Metasoft 美特软件 MetaCRM mobileupload.jsp unrestricted upload
LowCVSS 2.1No exploitEPSS 1%metasoft · metacrmJul 20, 2025
- CVE-2025-78778Monitor
Metasoft 美特软件 MetaCRM sendfile.jsp unrestricted upload
LowCVSS 2.1No exploitEPSS 1%metasoft · metacrmJul 20, 2025
- CVE-2025-78788Monitor
Metasoft 美特软件 MetaCRM upload2.jsp unrestricted upload
LowCVSS 2.1No exploitEPSS 1%metasoft · metacrmJul 20, 2025
- CVE-2025-78738Monitor
Metasoft 美特软件 MetaCRM mcc_login.jsp sql injection
LowCVSS 2.1No exploitEPSS 0%metasoft · metacrmJul 20, 2025
- CVE-2025-78808Monitor
Metasoft 美特软件 MetaCRM sendsms.jsp unrestricted upload
LowCVSS 2.1No exploitEPSS 0%metasoft · metacrmJul 20, 2025