Vulnerabilities

TI-2024-03025 CVE-2024-3227 · GHSA-fgmh-2jhg-vq8c

Panwei eoffice OA Backend save_image.php path traversal

LOW 33

A vulnerability was found in Panwei eoffice OA up to 9.5.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00955 Published 2024-04-03 No fix listed CWE-24

TI-2023-17396 CVE-2023-34798 · GHSA-chvg-j5c7-v8c4

MEDIUM 50

An arbitrary file upload vulnerability in eoffice before v9.5 allows attackers to execute arbitrary code via uploading a crafted file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00776 Published 2023-07-25 No fix listed CWE-434

TI-2023-02590 CVE-2023-2766 · GHSA-hjhp-prgp-pr6h

HIGH 65

A vulnerability was found in Weaver OA 9.5 and classified as problematic.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.54232 Published 2023-05-17 No fix listed CWE-552

TI-2023-02589 CVE-2023-2765 · GHSA-32mv-32jr-45q9

LOW 37

A vulnerability has been found in Weaver OA up to 9.5 and classified as problematic.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02182 Published 2023-05-17 No fix listed CWE-36

TI-2023-02477 CVE-2023-2648 · GHSA-p87m-68pc-hg94

HIGH 75

A vulnerability was found in Weaver E-Office 9.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.28478 Published 2023-05-11 No fix listed CWE-434

TI-2023-02476 CVE-2023-2647 · GHSA-mq6w-vmw6-wq6x

MEDIUM 48

A vulnerability was found in Weaver E-Office 9.5 and classified as critical.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.07008 Published 2023-05-11 No fix listed CWE-77