Priority HIGH 77
Intermesh Group-Office 3.3.0 before 3.5.5 contains an unauthenticated path traversal vulnerability in compress.php that allows remote attackers to read arbitrary files by manipulating the 'file' parameter.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00536 · Published 2026-10-22 · Fixed in 3.5.5 CWE-22
Priority MEDIUM 56
Group-Office is an enterprise customer relationship management and groupware tool.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.0023 · Published 2026-05-29 · Fixed in 26.0.25, 25.0.1005 +1 CWE-639
Priority MEDIUM 45
Group-Office is an enterprise customer relationship management and groupware tool.
CVSS 3.1CRITICAL 10.0· Network · Low privileges · No interaction · EPSS 0.01042 · Published 2026-04-02 · Fixed in 6.8.156, 25.0.90 +1 CWE-502
Priority MEDIUM 40
Group-Office is an enterprise customer relationship management and groupware tool.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00394 · Published 2026-03-27 · Fixed in 6.8.158, 25.0.92 +1 CWE-89
Priority MEDIUM 56
Group-Office is an enterprise customer relationship management and groupware tool.
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00314 · Published 2026-03-06 · Fixed in 6.8.155, 25.0.88 +1 CWE-79
Priority MEDIUM 44
Group-Office is an enterprise customer relationship management and groupware tool.
CVSS 4.0LOW 2.1· Network · No auth · User interaction · EPSS 0.00262 · Published 2026-03-06 · Fixed in 6.8.155, 25.0.88 +1 CWE-79
Priority MEDIUM 44
Group-Office is an enterprise customer relationship management and groupware tool.
CVSS 4.0CRITICAL 9.4· Network · Low privileges · No interaction · EPSS 0.008 · Published 2026-02-27 · Fixed in 26.0.9, 25.0.87 +1 CWE-434
Priority LOW 31
Group-Office is an enterprise customer relationship management and groupware tool.
CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00284 · Published 2026-02-27 · Fixed in 6.8.153, 25.0.87 +1 CWE-89
Priority HIGH 75
Group-Office is an enterprise customer relationship management and groupware tool.
CVSS 4.0HIGH 8.2· Network · High privileges · No interaction · EPSS 0.00439 · Published 2026-02-04 · Fixed in 6.8.150, 25.0.82 +1 CWE-918
Priority HIGH 82
Group-Office is an enterprise customer relationship management and groupware tool.
CVSS 4.0CRITICAL 9.4· Network · Low privileges · No interaction · EPSS 0.1986 · Published 2026-02-04 · Fixed in 6.8.150, 25.0.82 +1 CWE-78
Priority MEDIUM 44
Group-Office is an enterprise customer relationship management and groupware tool.
CVSS 4.0CRITICAL 9.4· Network · Low privileges · No interaction · EPSS 0.00886 · Published 2026-02-02 · Fixed in 6.8.150, 25.0.82 +1 CWE-88
Priority LOW 23
Group-Office is an enterprise customer relationship management and groupware tool.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00274 · Published 2026-01-21 · Fixed in 6.8.149, 25.0.80 CWE-20
Priority LOW 24
Group-Office versions prior to 6.8.119 and prior to 25.0.20 provided by Intermesh BV contain a path traversal vulnerability.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00342 · Published 2025-08-21 · Fixed in 6.8.119, 25.0.20 CWE-22
Priority LOW 21
Group-Office versions prior to 6.8.119 and prior to 25.0.20 provided by Intermesh BV contain a cross-site scripting vulnerability.
CVSS 4.0MEDIUM 4.8· Network · Low privileges · User interaction · EPSS 0.00188 · Published 2025-08-21 · Fixed in 6.8.119, 25.0.20 CWE-79
Priority MEDIUM 57
Group-Office is an enterprise customer relationship management and groupware tool.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00257 · Published 2025-06-17 · Fixed in 6.8.123, 25.0.27 CWE-79
Priority MEDIUM 57
Group-Office is an enterprise customer relationship management and groupware tool.
CVSS 4.0MEDIUM 5.2· Network · High privileges · No interaction · EPSS 0.00256 · Published 2025-06-16 · Fixed in 6.8.123, 25.0.27 CWE-79
Priority MEDIUM 57
Group-Office is an enterprise customer relationship management and groupware tool.
CVSS 4.0MEDIUM 5.3· Network · High privileges · User interaction · EPSS 0.00269 · Published 2025-05-22 · Fixed in 6.8.119, 25.0.20 CWE-79
Priority HIGH 65
Group-Office is an enterprise customer relationship management and groupware tool.
CVSS 4.0MEDIUM 5.8· Network · No auth · User interaction · EPSS 0.00274 · Published 2025-05-22 · Fixed in 6.8.119, 25.0.20 CWE-79
Priority HIGH 70
Group-Office is an enterprise customer relationship management and groupware tool.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00289 · Published 2025-05-22 · Fixed in 6.8.119, 25.0.20 CWE-79
Priority HIGH 70
Group-Office is an enterprise CRM and groupware tool.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00284 · Published 2025-03-06 · Fixed in 6.8.100 CWE-79
Priority LOW 25
Cross-site scripting vulnerability exists in Group Office prior to v6.6.182, prior to v6.7.64 and prior to v6.8.31, which may allow a remote authenticated attacker to execute an arbitrary script on the web browser of the…
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00618 · Published 2024-02-01 · Fixed in v6.6.182, v6.7.64 +1 CWE-79
Priority LOW 29
Group-Office is an enterprise CRM and groupware tool.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00424 · Published 2024-01-18 · Fixed in 6.8.29 CWE-79
Priority HIGH 73
Group-Office is an enterprise CRM and groupware tool.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00595 · Published 2023-11-07 · Fixed in 6.6.177, 6.7.54 +1 CWE-918
Priority LOW 35
SQL injection vulnerability in modules/notes/json.php in Intermesh Group-Office 3.5.9 allows remote attackers to execute arbitrary SQL commands via the category_id parameter in a category action.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.00961 · Published 2010-09-16 · No fix listed CWE-89
THREATIST.IORead the docs