Skip to contentGroup-office Group Office vulnerabilities
- group-office group office, intermesh groupoffice +1 moreGroup-Office is vulnerable to SSRF and File Read in WOPI service discoveryCVE-2026-255118.2 High
- group-office group office, intermesh groupoffice +1 moreGroup-Office is vulnerable to RCE due to Command Injection via TNEF Attachment HandlerCVE-2026-25512Public exploitEPSS 19.9%9.4 Critical
- group-office group office, intermesh groupoffice +1 moreGroup-Office Argument Injection in MaintenanceController::actionZipLanguageCVE-2026-251349.4 Critical
- group-office group office, intermesh groupoffice +1 moreGroup-Office has stored XSS vulnerability via unsanitized filenamesCVE-2026-238875.1 Medium
- group-office group officeAn issue in Intermesh BV GroupOffice vulnerable before v.25.0.47 and 6.8.136 allows a remote...CVE-2025-63406Public exploit8.8 High
- intermesh bv group-office, group-office group office +1 moreGroup-Office versions prior to 6.8.119 and prior to 25.0.20 provided by Intermesh BV contain a...CVE-2025-535055.3 Medium
- intermesh bv group-office, group-office group office +1 moreGroup-Office versions prior to 6.8.119 and prior to 25.0.20 provided by Intermesh BV contain a...CVE-2025-535044.8 Medium
- group-office group office, intermesh groupoffice +1 moreGroup-Office has a Stored XSS Vulnerability via user's name fieldCVE-2025-251916.9 Medium
- group-office group officeCross-site scripting vulnerability exists in Group Office prior to v6.6.182, prior to v6.7.64 and...CVE-2024-239415.4 Medium
- group-office group office, intermesh groupoffice +1 moreStored Cross-site Scripting Vulnerability via Malicious File Names in GroupOfficeCVE-2024-224186.5 Medium
- intermesh group-office, groupoffice, group-office group office +2 moreServer-Side Request Forgery in groupofficeCVE-2023-467307.4 High
- group-office group officeReflected Cross Site Scripting (XSS) in Intermesh BV Group-Office version 6.6.145, allows...CVE-2023-25292Public exploit6.1 Medium
- group-office group officeA Server-Side Request Forgery (SSRF) vulnerability in Group Office 6.4.196 allows a remote...CVE-2021-280605.3 Medium
- group-office group officeCross Site Scripting (XSS) in the contact page of Group Office CRM 6.4.196 by uploading a crafted...CVE-2020-354185.4 Medium
- group-office group officeCross Site Scripting (XSS) in Group Office CRM 6.4.196 via the SET_LANGUAGE parameter.CVE-2020-354196.1 Medium