Rubikon Teknoloji vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Rubikon Teknoloji products: 2 record(s), with severity, exploitation and fixes.

Easy Transfer 2

Exploited only (KEV) →

CVE-2020-37087 Medium · 5.1 CWE-79 Feb 3, 2026

Easy Transfer 1.7 for iOS - Persistent Cross-Site Scripting

Easy Transfer Wifi Transfer v1.7 for iOS contains a persistent cross-site scripting vulnerability that allows remote attackers to inject malicious scripts by manipulating the oldPath, newPath, and path parameters in Create Folder and Move/Edit functions. Attackers can exploit improper input validation via POST requests to execute arbitrary JavaScript in the context of the mobile web application.

CVE-2020-37086 Medium · 6.2 CWE-22 Feb 3, 2026

Easy Transfer 1.7 for iOS - Directory Traversal

Easy Transfer 1.7 iOS mobile application contains a directory traversal vulnerability that allows remote attackers to access unauthorized file system paths without authentication. Attackers can exploit the vulnerability by manipulating path parameters in GET and POST requests to list or download sensitive system files and inject malicious scripts into application parameters.