Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: e-Excellence U-Office Force 28.0 Clear all filters
TI-2025-02111 CVE-2025-2396 · GHSA-g3h4-pvrv-w9c2

e-Excellence U-Office Force - Arbitrary File Upload

Priority MEDIUM 41

The U-Office Force from e-Excellence has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privileges to upload and execute web shell backdoors, thereby enabling arbitrary code execution on t…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00696 Published 2025-03-17 Fixed in 28.0 CWE-434
TI-2025-02110 CVE-2025-2395 · GHSA-8wxh-j3rh-hq7g

e-Excellence U-Office Force - Improper Authentication

Priority MEDIUM 50

The U-Office Force from e-Excellence has an Improper Authentication vulnerability, allowing unauthenticated remote attackers to use a particular API and alter cookies to log in as an administrator.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00591 Published 2025-03-17 Fixed in 28.0 CWE-565