andsoft has 40 CVEs on record. The median CVSS is 6.1 (medium), with 9 rated critical. None have a confirmed exploitation report. The dominant weakness classes are CWE-79 (29) and CWE-77 (7).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.1
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Worst active — by depth score
CVE-2025-59743Critical· 9.8SQL injection vulnerability in AndSoft's e-TMS v25.0354CVE-2025-59742Critical· 9.8SQL injection vulnerability in AndSoft's e-TMS v25.0354CVE-2025-59741Critical· 9.8Operating system command injection vulnerability in AndSoft's e-TMS v25.0354CVE-2025-59740Critical· 9.8Operating system command injection vulnerability in AndSoft's e-TMS v25.0354CVE-2025-59739Critical· 9.8Operating system command injection vulnerability in AndSoft's e-TMS v25.0354
andsoft vulnerabilities
CVEs affecting andsoft, newest first. Open any entry for full detail, references, and exploit status.
40 CVEsRSS
CVE-2025-59771Medium· 6.1Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03
Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter an…
CVE-2025-59770Medium· 6.1Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03
Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter an…
CVE-2025-59769Medium· 6.1Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03
Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter an…
CVE-2025-59768Medium· 6.1Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03
Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter an…
CVE-2025-59767Medium· 6.1Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03
Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter an…
CVE-2025-59766Medium· 6.1Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03
Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter an…
CVE-2025-59765Medium· 6.1Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03
Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter an…
CVE-2025-59764Medium· 6.1Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03
Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter an…
CVE-2025-59763Medium· 6.1Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03
Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter an…
CVE-2025-59762Medium· 6.1Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03
Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter an…
CVE-2025-59761Medium· 6.1Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03
Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter an…
CVE-2025-59760Medium· 6.1Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03
Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter an…
CVE-2025-59758Medium· 6.1Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03
Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter an…
CVE-2025-59757Medium· 6.1Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03
Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter an…
CVE-2025-59756Medium· 6.1Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03
Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter an…
CVE-2025-59755Medium· 6.1Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03
Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter an…
CVE-2025-59754Medium· 6.1Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03
Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter an…
CVE-2025-59753Medium· 6.1Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03
Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter an…
CVE-2025-59752Medium· 6.1Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03
Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter an…
CVE-2025-59751Medium· 6.1Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03
Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter an…
CVE-2025-59750Medium· 6.1Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03
Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter an…
CVE-2025-59749Medium· 6.1Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03
Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter an…
CVE-2025-59748Medium· 6.1Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03
Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter an…
CVE-2025-59747Medium· 6.1Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03
Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter an…
CVE-2025-59746Medium· 6.1Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03
Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter an…
CVE-2025-59745High· 7.5Vulnerability in the cryptographic algorithm of AndSoft's e-TMS v25.03, which uses MD5 to encrypt passwords
Vulnerability in the cryptographic algorithm of AndSoft's e-TMS v25.03, which uses MD5 to encrypt passwords. MD5 is a cryptographically vulnerable hash algorithm and is no longer considered secure for storing or transmitting passwords. I…
CVE-2025-59744High· 7.5Path traversal vulnerability in AndSoft's e-TMS v25.03
Path traversal vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to access files only within the web root using the “docurl” parameter in “/lib/asp/DOCSAVEASASP.ASP”.
CVE-2025-59743Critical· 9.8SQL injection vulnerability in AndSoft's e-TMS v25.03
SQL injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability could allow an attacker to retrieve, create, update, and delete databases by sending a POST request. The relationship between parameter and assigned identifier is …
CVE-2025-59742Critical· 9.8SQL injection vulnerability in AndSoft's e-TMS v25.03
SQL injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability could allow an attacker to retrieve, create, update, and delete databases by sending a POST request. The relationship between parameter and assigned identifier is …
CVE-2025-59740Critical· 9.8Operating system command injection vulnerability in AndSoft's e-TMS v25.03
Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assign…