group-office
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 26 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from May 16, 2007 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Group-Office: Authenticated Stored XSS in Administrator Context via Arbitrary Cross-User Setting Write
Group-Office: Authenticated Remote Code Execution via PHP Insecure Deserialization in `AbstractSettingsCollection`
Authenticated SQL Injection in Contact/query addressBookIds filter
Group-Office: Reflected XSS in JavaScript context
Group-Office: Self XSS in GroupOffice Installer License Page (install/license.php)
Group-Office Vulnerable to Remote Code Execution (RCE)
Group-Office Has Authenticated SQL Injection in advancedQueryData.comparator
Group-Office is vulnerable to SSRF and File Read in WOPI service discovery
Group-Office is vulnerable to RCE due to Command Injection via TNEF Attachment Handler
Group-Office Argument Injection in MaintenanceController::actionZipLanguage
Monitor group-office in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.