Intermesh groupoffice

CVE-2026-45551 Medium 5.1 Group-Office: Authenticated Stored XSS in Administrator Context via Arbitrary Cross-User Setting Write 0.2%
CVE-2026-34838 Critical 10.0 Group-Office: Authenticated Remote Code Execution via PHP Insecure Deserialization in `AbstractSettingsCollection` 1.0%
CVE-2026-33755 High 8.8 Authenticated SQL Injection in Contact/query addressBookIds filter 0.4%
CVE-2026-30238 Medium 5.1 Group-Office: Reflected XSS in JavaScript context 0.3%
CVE-2026-30237 Low 2.1 Group-Office: Self XSS in GroupOffice Installer License Page (install/license.php) 0.3%
CVE-2026-27947 Critical 9.4 Group-Office Vulnerable to Remote Code Execution (RCE) 0.8%
CVE-2026-27832 High 7.1 Group-Office Has Authenticated SQL Injection in advancedQueryData.comparator 0.3%
CVE-2026-25511 High 8.2 Group-Office is vulnerable to SSRF and File Read in WOPI service discovery 0.4%
CVE-2026-25512 Critical 9.4 Group-Office is vulnerable to RCE due to Command Injection via TNEF Attachment Handler 19.9%
CVE-2026-25134 Critical 9.4 Group-Office Argument Injection in MaintenanceController::actionZipLanguage 0.9%
CVE-2026-23887 Medium 5.1 Group-Office has stored XSS vulnerability via unsanitized filenames 0.3%
CVE-2025-48993 Medium 5.3 Group-Office vulnerable to reflected XSS via Look and Feel Formatting input 0.3%
CVE-2025-48992 Medium 5.2 Group-Office vulnerable to blind XSS 0.3%
CVE-2025-48369 Medium 5.3 GroupOffice vulnerable to Stored XSS in Tasks Comment Section 0.3%
CVE-2025-48368 Medium 5.8 GroupOffice's DOM-Based XSS in all Date Input Fields Allows Arbitrary JavaScript Execution 0.3%
CVE-2025-48366 Medium 6.9 GroupOffice's Blind Stored XSS in Phone Number Field Enables Forced Redirect and Unauthorized Actions 0.3%
CVE-2025-25191 Medium 6.9 Group-Office has a Stored XSS Vulnerability via user's name field 0.3%
CVE-2024-22418 Medium 6.5 Stored Cross-site Scripting Vulnerability via Malicious File Names in GroupOffice 0.4%
CVE-2023-46730 High 7.4 Server-Side Request Forgery in groupoffice 0.6%