Intermesh

Group-office

18 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2025-53504

  • EPSS 0.03%
  • Veröffentlicht 21.08.2025 04:29:14
  • Zuletzt bearbeitet 24.09.2025 00:14:41

Group-Office versions prior to 6.8.119 and prior to 25.0.20 provided by Intermesh BV contain a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser.

6.1

CVE-2025-48993

  • EPSS 0.04%
  • Veröffentlicht 17.06.2025 00:43:35
  • Zuletzt bearbeitet 04.09.2025 15:57:24

Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.123 and 25.0.27, a malicious JavaScript payload can be executed via the Look and Feel formatting fields. Any user can update their Look and Feel ...

4.8

CVE-2025-48992

Exploit
  • EPSS 0.05%
  • Veröffentlicht 16.06.2025 22:17:28
  • Zuletzt bearbeitet 04.09.2025 15:57:27

Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.123 and 25.0.27, a stored and blind cross-site scripting (XSS) vulnerability exists in the Name Field of the user profile. A malicious attacker c...

5.4

CVE-2025-48369

Exploit
  • EPSS 0.05%
  • Veröffentlicht 22.05.2025 17:33:06
  • Zuletzt bearbeitet 30.05.2025 01:17:25

Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.119 and 25.0.20, a persistent Cross-Site Scripting (XSS) vulnerability exists in Groupoffice's tasks comment functionality, allowing attackers to...

5.4

CVE-2025-48368

Exploit
  • EPSS 0.05%
  • Veröffentlicht 22.05.2025 17:29:57
  • Zuletzt bearbeitet 30.05.2025 01:17:44

Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.119 and 25.0.20, a DOM-based Cross-Site Scripting (XSS) vulnerability exists in the GroupOffice application, allowing attackers to execute arbitr...

5.4

CVE-2025-48366

  • EPSS 0.08%
  • Veröffentlicht 22.05.2025 17:28:26
  • Zuletzt bearbeitet 30.05.2025 01:17:53

Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.119 and 25.0.20, a stored and blind XSS vulnerability exists in the Phone Number field of the user profile within the GroupOffice application. Th...

5.4

CVE-2025-25191

Exploit
  • EPSS 0.22%
  • Veröffentlicht 06.03.2025 19:15:27
  • Zuletzt bearbeitet 10.10.2025 20:11:15

Group-Office is an enterprise CRM and groupware tool. This Stored XSS vulnerability exists where user input in the Name field is not properly sanitized before being stored. This vulnerability is fixed in 6.8.100.

7.5

CVE-2010-3428

Exploit
  • EPSS 0.11%
  • Veröffentlicht 16.09.2010 22:00:03
  • Zuletzt bearbeitet 11.04.2025 00:51:21

SQL injection vulnerability in modules/notes/json.php in Intermesh Group-Office 3.5.9 allows remote attackers to execute arbitrary SQL commands via the category_id parameter in a category action.