Group-office vulnerabilities

Products

• Group Office 15

Newest

• group-office group office, intermesh groupoffice +1 more Group-Office is vulnerable to SSRF and File Read in WOPI service discovery CVE-2026-25511 8.2 HighFebruary 4, 2026
• group-office group office, intermesh groupoffice +1 more Group-Office is vulnerable to RCE due to Command Injection via TNEF Attachment Handler CVE-2026-25512 Public exploit EPSS 19.9% 9.4 CriticalFebruary 4, 2026
• group-office group office, intermesh groupoffice +1 more Group-Office Argument Injection in MaintenanceController::actionZipLanguage CVE-2026-25134 9.4 CriticalFebruary 2, 2026
• group-office group office, intermesh groupoffice +1 more Group-Office has stored XSS vulnerability via unsanitized filenames CVE-2026-23887 5.1 MediumJanuary 21, 2026
• group-office group office An issue in Intermesh BV GroupOffice vulnerable before v.25.0.47 and 6.8.136 allows a remote... CVE-2025-63406 Public exploit 8.8 HighNovember 13, 2025
• intermesh bv group-office, group-office group office +1 more Group-Office versions prior to 6.8.119 and prior to 25.0.20 provided by Intermesh BV contain a... CVE-2025-53505 5.3 MediumAugust 21, 2025
• intermesh bv group-office, group-office group office +1 more Group-Office versions prior to 6.8.119 and prior to 25.0.20 provided by Intermesh BV contain a... CVE-2025-53504 4.8 MediumAugust 21, 2025
• group-office group office, intermesh groupoffice +1 more Group-Office has a Stored XSS Vulnerability via user's name field CVE-2025-25191 6.9 MediumMarch 6, 2025
• group-office group office Cross-site scripting vulnerability exists in Group Office prior to v6.6.182, prior to v6.7.64 and... CVE-2024-23941 5.4 MediumFebruary 1, 2024
• group-office group office, intermesh groupoffice +1 more Stored Cross-site Scripting Vulnerability via Malicious File Names in GroupOffice CVE-2024-22418 6.5 MediumJanuary 18, 2024
• intermesh group-office, groupoffice, group-office group office +2 more Server-Side Request Forgery in groupoffice CVE-2023-46730 7.4 HighNovember 7, 2023
• group-office group office Reflected Cross Site Scripting (XSS) in Intermesh BV Group-Office version 6.6.145, allows... CVE-2023-25292 Public exploit 6.1 MediumApril 27, 2023
• group-office group office A Server-Side Request Forgery (SSRF) vulnerability in Group Office 6.4.196 allows a remote... CVE-2021-28060 5.3 MediumApril 14, 2021
• group-office group office Cross Site Scripting (XSS) in the contact page of Group Office CRM 6.4.196 by uploading a crafted... CVE-2020-35418 5.4 MediumApril 14, 2021
• group-office group office Cross Site Scripting (XSS) in Group Office CRM 6.4.196 via the SET_LANGUAGE parameter. CVE-2020-35419 6.1 MediumApril 14, 2021
• group-office groupoffice SQL injection vulnerability in modules/calendar/json.php in Group-Office community before 4.0.90... CVE-2012-4240 Public exploit 6.5 MediumSeptember 11, 2014
• group-office groupware Group-Office before 2.16-13 does not properly validate user IDs, which allows remote attackers to... CVE-2007-2720 4.3 MediumMay 16, 2007