andsoft has 40 CVEs on record. The median CVSS is 6.1 (medium), with 9 rated critical. None have a confirmed exploitation report. The dominant weakness classes are CWE-79 (29) and CWE-77 (7).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.1
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Worst active — by depth score
CVE-2025-59743Critical· 9.8SQL injection vulnerability in AndSoft's e-TMS v25.0354CVE-2025-59742Critical· 9.8SQL injection vulnerability in AndSoft's e-TMS v25.0354CVE-2025-59741Critical· 9.8Operating system command injection vulnerability in AndSoft's e-TMS v25.0354CVE-2025-59740Critical· 9.8Operating system command injection vulnerability in AndSoft's e-TMS v25.0354CVE-2025-59739Critical· 9.8Operating system command injection vulnerability in AndSoft's e-TMS v25.0354
andsoft vulnerabilities
CVEs affecting andsoft, newest first. Open any entry for full detail, references, and exploit status.
40 CVEsRSS
CVE-2025-59739Critical· 9.8Operating system command injection vulnerability in AndSoft's e-TMS v25.03
Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assign…
CVE-2025-59738Critical· 9.8Operating system command injection vulnerability in AndSoft's e-TMS v25.03
Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assign…
CVE-2025-59737Critical· 9.8Operating system command injection vulnerability in AndSoft's e-TMS v25.03
Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assign…
CVE-2025-59736Critical· 9.8Operating system command injection vulnerability in AndSoft's e-TMS v25.03
Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assign…
CVE-2025-59735Critical· 9.8Operating system command injection vulnerability in AndSoft's e-TMS v25.03
Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assign…
CVE-2025-59774Medium· 6.1Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03
Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter an…
CVE-2025-59773Medium· 6.1Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03
Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter an…
CVE-2025-59772Medium· 6.1Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03
Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter an…
CVE-2025-59759Medium· 6.1Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03
Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter an…
CVE-2025-59741Critical· 9.8Operating system command injection vulnerability in AndSoft's e-TMS v25.03
Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assign…