U Office Force
Approved changes feed: RSS · Atom
cpe:2.3:a:e-excellence_inc.:u-office_force:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | E Excellence Inc. (da9d681e-da84-5dc2-9f60-79337d381d64) |
|---|---|
| Product | U Office Force (cc2062ad-e553-5930-b7a2-2c5408b7cb41) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-39027 |
vulnerable | 2026-06-08 05:47:17.655138 |
e-Excellence Inc. U-Office Force - Stored XSS
MEDIUM (5.4)
U-Office Force Forum function has insufficient filtering for special characters. A remote attacker with general user privilege can inject JavaScript and perform XSS (Stored Cross-Site Scripting) attack.
Published: 2022-10-31T06:40:39.616Z
Updated: 2025-05-06T15:33:51.091Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39026 |
vulnerable | 2026-06-08 05:47:17.654628 |
e-Excellence Inc. U-Office Force - Stored XSS
MEDIUM (5.4)
U-Office Force UserDefault page has insufficient filtering for special characters in the HTTP header fields. A remote attacker with general user privilege can exploit this vulnerability to inject JavaScript and perform XSS (Stored Cross-Site Scripting) attack.
Published: 2022-10-31T06:40:38.607Z
Updated: 2025-05-06T15:37:19.192Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39025 |
vulnerable | 2026-06-08 05:47:17.654033 |
e-Excellence Inc. U-Office Force - Reflected XSS
MEDIUM (6.1)
U-Office Force PrintMessage function has insufficient filtering for special characters. An unauthenticated remote attacker can exploit this vulnerability to inject JavaScript and perform XSS (Reflected Cross-Site Scripting) attack.
Published: 2022-10-31T06:40:37.605Z
Updated: 2025-05-06T15:38:12.934Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39024 |
vulnerable | 2026-06-08 05:47:17.653712 |
e-Excellence Inc. U-Office Force - Reflected XSS
MEDIUM (6.1)
U-Office Force Bulletin function has insufficient filtering for special characters. An unauthenticated remote attacker can exploit this vulnerability to inject JavaScript and perform XSS (Reflected Cross-Site Scripting) attack.
Published: 2022-10-31T06:40:36.532Z
Updated: 2025-05-06T15:39:04.832Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39023 |
vulnerable | 2026-06-08 05:47:17.653358 |
e-Excellence Inc. U-Office Force - Path Traversal
MEDIUM (6.5)
U-Office Force Download function has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to download arbitrary system file.
Published: 2022-10-31T06:40:35.568Z
Updated: 2025-05-06T19:26:49.046Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39022 |
vulnerable | 2026-06-08 05:47:17.652893 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39021 |
vulnerable | 2026-06-08 05:47:17.651764 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.