Xtool Anyscan
Vendor:
First CVE: Nov 24, 2025 · Active for under a year
4
Total CVEs
More Total CVEs than 72% of tracked products
4.0
Avg CVEs / Year
Higher CVE frequency than 83% of tracked products
5.6
Avg CVSS
Higher Avg CVSS than 16% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Xtool Anyscan over time
Volume of CVEsAvg CVSS Base Score
First CVE
Nov 24, 2025
7 months ago
Most Recent CVE
Nov 24, 2025
242 days ago
CVE Severity & Scoring
Xtool Anyscan4 CVEs
75%
25%
All CVEs352,294 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network4 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low4 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None2 (50.0%)
Unknown0 (0.0%)
Required2 (50.0%)
Privileges Required
Low4 (100.0%)
High0 (0.0%)
None0 (0.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (4 CVEs).
4 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-63434HIGH The update mechanism in Xtooltech Xtool AnyScan Android Application 4.40.40 and prior is insecure. The application downloads and extracts update packages containing executable code | Nov 24, 2025 | 8.8 | 27 | NO | NO |
CVE-2025-63433MEDIUM Xtooltech Xtool AnyScan Android Application 4.40.40 and prior uses a hardcoded cryptographic key and IV to decrypt update metadata. The key is stored as a static value within the a | Nov 24, 2025 | 4.6 | 19 | NO | NO |
CVE-2025-63432MEDIUM Xtooltech Xtool AnyScan Android Application 4.40.40 and prior is Missing SSL Certificate Validation. The application fails to properly validate the TLS certificate from its update | Nov 24, 2025 | 4.6 | 19 | NO | NO |
CVE-2025-63435MEDIUM Xtooltech Xtool AnyScan Android Application 4.40.40 is Missing Authentication for Critical Function. The server-side endpoint responsible for serving update packages for the applic | Nov 24, 2025 | 4.3 | 18 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (4 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (4 CVEs).
Media Mentions
Signals from CVEs in this product scope (4 CVEs).
Top CNAs Publishing CVEs For Xtool Anyscan
Top CWEs
Versions
No cataloged versions.