Approved changes feed: RSS · Atom

cpe:2.3:a:e-excellence:u-office_force:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorE Excellence (87adf59a-407b-54e8-b083-324f31ffc7b6)
ProductU Office Force (86b455c2-e840-5216-843c-c2cb46b97283)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-3422 vulnerable 2026-06-08 08:01:18.597048 e-Excellence|U-Office Force - Insecure Deserialization
CRITICAL (9.8)
U-Office Force developed by e-Excellence has a Insecure Deserialization vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server by sending maliciously crafted serialized content.
Published: 2026-03-02T06:24:41.856Z
Updated: 2026-03-02T18:49:21.014Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2396 vulnerable 2026-06-08 07:16:56.962776 e-Excellence U-Office Force - Arbitrary File Upload
HIGH (8.8)
The U-Office Force from e-Excellence has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privileges to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.
Published: 2025-03-17T05:58:47.989Z
Updated: 2025-03-17T12:54:14.143Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2395 vulnerable 2026-06-08 07:16:56.961115 e-Excellence U-Office Force - Improper Authentication
CRITICAL (9.8)
The U-Office Force from e-Excellence has an Improper Authentication vulnerability, allowing unauthenticated remote attackers to use a particular API and alter cookies to log in as an administrator.
Published: 2025-03-17T05:51:02.041Z
Updated: 2025-03-17T12:55:25.533Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12865 vulnerable 2026-06-08 07:04:31.106036 e-Excellence|U-Office Force - SQL Injection
HIGH (8.8)
U-Office Force developed by e-Excellence has a SQL Injection vulnerability, allowing authenticated remote attacker to inject arbitrary SQL commands to read, modify, and delete database contents.
Published: 2025-11-10T02:19:00.552Z
Updated: 2025-11-10T16:32:32.423Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12864 vulnerable 2026-06-08 07:04:31.104145 e-Excellence|U-Office Force - SQL Injection
HIGH (8.8)
U-Office Force developed by e-Excellence has a SQL Injection vulnerability, allowing authenticated remote attacker to inject arbitrary SQL commands to read, modify, and delete database contents.
Published: 2025-11-10T02:15:04.569Z
Updated: 2025-11-10T16:44:10.324Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32757 vulnerable 2026-06-08 06:04:47.188014 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32756 vulnerable 2026-06-08 06:04:47.187582 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32755 vulnerable 2026-06-08 06:04:47.186183 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.