U Office Force
CVE-2023-32755
MEDIUM
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Lifecycle Timeline
1DescriptionNVD
e-Excellence U-Office Force generates an error message in webiste service. An unauthenticated remote attacker can obtain partial sensitive system information from error message by sending a crafted command.
AnalysisAI
e-Excellence U-Office Force generates an error message in webiste service. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability is classified under CWE-209. e-Excellence U-Office Force generates an error message in webiste service. An unauthenticated remote attacker can obtain partial sensitive system information from error message by sending a crafted command. Affected products include: Edetw U-Office Force.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in U Office Force
View allU-Office Force by e-Excellence has an insecure deserialization vulnerability allowing unauthenticated remote code execut
The U-Office Force from e-Excellence has an Improper Authentication vulnerability, allowing unauthenticated remote attac
e-Excellence U-Office Force file uploading function does not restrict upload of file with dangerous type. Rated critical
The U-Office Force from e-Excellence has an Arbitrary File Upload vulnerability, allowing remote attackers with regular
e-Excellence U-Office Force has a path traversal vulnerability within its file uploading and downloading functions. Rate
U-Office Force Download function has a path traversal vulnerability. Rated medium severity (CVSS 6.5), this vulnerabilit
U-Office Force Download function has a path traversal vulnerability. Rated medium severity (CVSS 6.5), this vulnerabilit
U-Office Force PrintMessage function has insufficient filtering for special characters. Rated medium severity (CVSS 6.1)
U-Office Force Bulletin function has insufficient filtering for special characters. Rated medium severity (CVSS 6.1), th
U-Office Force login function has an Open Redirect vulnerability. Rated medium severity (CVSS 6.1), this vulnerability i
U-Office Force Forum function has insufficient filtering for special characters. Rated medium severity (CVSS 5.4), this
U-Office Force UserDefault page has insufficient filtering for special characters in the HTTP header fields. Rated mediu
Same weakness CWE-209 – Error Message Information Leak
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today