Office Suite

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-38617 Jul 20, 19:15 MEDIUM POC This Month

Office Suite Premium Version v10.9.1.42602 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the filter parameter at /api?path=files. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Microsoft Office Suite Mobisystems

NVD

CVSS 3.1

6.1

EPSS

0.5%

CVE-2023-37601 Jul 20, 19:15 HIGH POC This Week

Office Suite Premium v10.9.1.42602 was discovered to contain a local file inclusion (LFI) vulnerability via the component /etc/hosts. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Path Traversal Microsoft Office Suite Mobisystems

NVD

CVSS 3.1

7.5

EPSS

1.0%

CVE-2023-37600 Jul 20, 19:15 MEDIUM POC This Month

Office Suite Premium Version v10.9.1.42602 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the id parameter at /api?path=profile. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Microsoft Office Suite Mobisystems

NVD

CVSS 3.1

6.1

EPSS

0.5%

CVE-2023-38617

EPSS 0% CVSS 6.1

MEDIUM POC This Month

XSS Microsoft Office Suite +1

NVD

CVE-2023-37601

EPSS 1% CVSS 7.5

HIGH POC This Week

Path Traversal Microsoft Office Suite +1

NVD

CVE-2023-37600

EPSS 0% CVSS 6.1

MEDIUM POC This Month

XSS Microsoft Office Suite +1

NVD