İçeriğe atla
Noroxi

group-office kayıtları

group-office üreticisine ait 17 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%17,6
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 21
  2. 23
  3. 24
  4. 25
  5. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

17 kayıt
  • CVE-2026-25512
    43Planlayın

    Group-Office is vulnerable to RCE due to Command Injection via TNEF Attachment Handler

    KritikCVSS 9,4Kavram kanıtıEPSS %20

    group-office · group office4 Şub 2026

  • CVE-2026-25134
    37İzleyin

    Group-Office Argument Injection in MaintenanceController::actionZipLanguage

    KritikCVSS 9,4İstismar yokEPSS %0

    group-office · group office2 Şub 2026

  • CVE-2025-63406
    35İzleyin

    An issue in Intermesh BV GroupOffice vulnerable before v.25.0.47 and 6.8.136 allows a remote attacker to execute arbitrary code via the dbTo

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    group-office · group office13 Kas 2025

  • CVE-2023-46730
    35İzleyin

    Server-Side Request Forgery in groupoffice

    YüksekCVSS 8,8İstismar yokEPSS %0

    group-office · group office7 Kas 2023

  • CVE-2026-25511
    32İzleyin

    Group-Office is vulnerable to SSRF and File Read in WOPI service discovery

    YüksekCVSS 8,2İstismar yokEPSS %0

    group-office · group office4 Şub 2026

  • CVE-2025-25191
    27İzleyin

    Group-Office has a Stored XSS Vulnerability via user's name field

    OrtaCVSS 6,9İstismar yokEPSS %0

    group-office · group office6 Mar 2025

  • CVE-2012-4240
    26İzleyin

    SQL injection vulnerability in modules/calendar/json.php in Group-Office community before 4.0.90 allows remote authenticated users to execut

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    group-office · groupoffice11 Eyl 2014

  • CVE-2020-35419
    24İzleyin

    Cross Site Scripting (XSS) in Group Office CRM 6.4.196 via the SET_LANGUAGE parameter.

    OrtaCVSS 6,1İstismar yokEPSS %0

    group-office · group office14 Nis 2021

  • CVE-2023-25292
    24İzleyin

    Reflected Cross Site Scripting (XSS) in Intermesh BV Group-Office version 6.6.145, allows attackers to gain escalated privileges and gain se

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    group-office · group office26 Nis 2023

  • CVE-2021-28060
    21İzleyin

    A Server-Side Request Forgery (SSRF) vulnerability in Group Office 6.4.196 allows a remote attacker to forge GET requests to arbitrary URLs

    OrtaCVSS 5,3İstismar yokEPSS %1

    group-office · group office14 Nis 2021

  • CVE-2024-23941
    21İzleyin

    Cross-site scripting vulnerability exists in Group Office prior to v6.6.182, prior to v6.7.64 and prior to v6.8.31, which may allow a remote

    OrtaCVSS 5,4İstismar yokEPSS %0

    group-office · group office1 Şub 2024

  • CVE-2020-35418
    21İzleyin

    Cross Site Scripting (XSS) in the contact page of Group Office CRM 6.4.196 by uploading a crafted svg file.

    OrtaCVSS 5,4İstismar yokEPSS %0

    group-office · group office14 Nis 2021

  • CVE-2024-22418
    21İzleyin

    Stored Cross-site Scripting Vulnerability via Malicious File Names in GroupOffice

    OrtaCVSS 5,4İstismar yokEPSS %0

    group-office · group office18 Oca 2024

  • CVE-2025-53505
    21İzleyin

    Group-Office versions prior to 6.8.119 and prior to 25.0.20 provided by Intermesh BV contain a path traversal vulnerability.

    OrtaCVSS 5,3İstismar yokEPSS %0

    group-office · group office21 Ağu 2025

  • CVE-2026-23887
    20İzleyin

    Group-Office has stored XSS vulnerability via unsanitized filenames

    OrtaCVSS 5,1İstismar yokEPSS %0

    group-office · group office21 Oca 2026

  • CVE-2025-53504
    19İzleyin

    Group-Office versions prior to 6.8.119 and prior to 25.0.20 provided by Intermesh BV contain a cross-site scripting vulnerability.

    OrtaCVSS 4,8İstismar yokEPSS %0

    group-office · group office21 Ağu 2025

  • CVE-2007-2720
    17İzleyin

    Group-Office before 2.16-13 does not properly validate user IDs, which allows remote attackers to obtain sensitive information via certain r

    OrtaCVSS 4,3İstismar yokEPSS %1

    group-office · group-office groupware16 May 2007