Known vulnerabilities in e-STUDIO 908

Vendor: Toshiba
Software: e-STUDIO 908
Software CPE: cpe:2.3:h:toshiba:e-studio_908:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 17
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting e-STUDIO 908 e-STUDIO 908 is affected by 17 known vulnerabilities: 4 high, 11 medium, 2 low Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140746 - Insecure Default Initialization of Resource
CVE-2026-63563		 CWE-1188 Medium
No
No
 - 03.08.2026 SB2026080323
#VU140745 - Incomplete cleanup
CVE-2026-63545		 CWE-459 Low
No
No
 - 03.08.2026 SB2026080323
#VU140744 - Direct Request ('Forced Browsing')
CVE-2026-60011		 CWE-425 Medium
No
No
 - 03.08.2026 SB2026080323
#VU91294 - Out-of-bounds read
CVE-2024-36254		 CWE-125 Medium
No
No
 - 07.06.2024 SB2024060727
#VU91293 - Out-of-bounds read
CVE-2024-36251		 CWE-125 Medium
No
No
 - 07.06.2024 SB2024060727
#VU91292 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-36249		 CWE-79 Low
No
No
 - 07.06.2024 SB2024060727
#VU91289 - Use of Hard-coded Credentials
CVE-2024-36248		 CWE-798 High
No
No
 - 07.06.2024 SB2024060727
#VU91285 - Use of Hard-coded Credentials
CVE-2024-35244		 CWE-798 High
No
No
 - 07.06.2024 SB2024060727
#VU91284 - Exposure of sensitive information to an unauthorized actor
CVE-2024-34162		 CWE-200 Medium
No
No
 - 07.06.2024 SB2024060727
#VU91283 - Improper Access Control
CVE-2024-33616		 CWE-284 Medium
No
No
 - 07.06.2024 SB2024060727
#VU91282 - Improper Access Control
CVE-2024-33610		 CWE-284 High
No
No
 - 07.06.2024 SB2024060727
#VU91281 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-33605		 CWE-22 Medium
No
No
 - 07.06.2024 SB2024060727
#VU91280 - Storing Passwords in a Recoverable Format
CVE-2024-32151		 CWE-257 Medium
No
No
 - 07.06.2024 SB2024060727
#VU91279 - Unprotected Storage of Credentials
CVE-2024-29978		 CWE-256 Medium
No
No
 - 07.06.2024 SB2024060727
#VU91278 - Cleartext Storage of Sensitive Information
CVE-2024-29146		 CWE-312 Medium
No
No
 - 07.06.2024 SB2024060727
#VU91277 - Incorrect Permission Assignment for Critical Resource
CVE-2024-28955		 CWE-732 Medium
No
No
 - 07.06.2024 SB2024060727
#VU91276 - Stack-based buffer overflow
CVE-2024-28038		 CWE-121 High
No
No
 - 07.06.2024 SB2024060727