Known vulnerabilities in SS1

Known vulnerabilities in SS1

Vendor: DOS Co

Software: SS1

Software CPE: cpe:2.3:a:dos_co:ss1:*:*:*:*:*:*:*:*

Website: https://www.dos-osaka.co.jp/

Total vulnerabilities: 13

Public exploits: 0

Known exploited (KEV): 0

Breakdown by Severity Chart

Vulnerabilities (13)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU162573 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-113437	CWE-22	Medium	No	No	17.0.0.60	09.11.2026	SB2026110927 SB2026110928
#VU162572 - Insecure Storage of Sensitive Information CVE-2026-109582	CWE-922		No	No	17.0.0.60	09.11.2026	SB2026110927
#VU115214 - Use of Hard-coded Password CVE-2025-58081	CWE-259	Medium	No	No	-	15.09.2025	SB2025091532
#VU115213 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-58072	CWE-22	Medium	No	No	-	15.09.2025	SB2025091532
#VU115212 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-54819	CWE-22	Medium	No	No	-	15.09.2025	SB2025091532
#VU115211 - Unrestricted Upload of File with Dangerous Type CVE-2025-54762	CWE-434	High	No	No	-	15.09.2025	SB2025091532
#VU115210 - Unrestricted Upload of File with Dangerous Type CVE-2025-53970	CWE-434	High	No	No	-	15.09.2025	SB2025091532
#VU115209 - Incorrect Permission Assignment for Critical Resource CVE-2025-53396	CWE-732	Low	No	No	-	15.09.2025	SB2025091532
#VU115208 - Files or Directories Accessible to External Parties CVE-2025-52460	CWE-552	Medium	No	No	-	15.09.2025	SB2025091532
#VU115207 - Inadequate Encryption Strength CVE-2025-46409	CWE-326	Medium	No	No	-	15.09.2025	SB2025091532
#VU72637 - Use of Hard-coded Credentials CVE-2023-22344	CWE-798	Medium	No	No	-	01.03.2023	SB2023030104
#VU72636 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2023-22336	CWE-22	Medium	No	No	-	01.03.2023	SB2023030104
#VU72635 - Improper Access Control CVE-2023-22335	CWE-284	Medium	No	No	-	01.03.2023	SB2023030104