e-Excellence Inc. U-Office Force - Reflected XSS
CVE-2022-39024

6.1MEDIUM

Key Information:

Vendor: E-excellence Inc.
Status: U-office Force
Vendor: CVE Published:; 31 October 2022

🔔 Create E-excellence Inc. Vulnerability Alert

What is CVE-2022-39024?

U-Office Force Bulletin function has insufficient filtering for special characters. An unauthenticated remote attacker can exploit this vulnerability to inject JavaScript and perform XSS (Reflected Cross-Site Scripting) attack.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

U-Office Force <= 20.50.7821D Build:202104sp1

References

https://www.twcert.org.tw/tw/cp-132-6639-fad13-1.html

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Timeline

Vulnerability published
Oct 31, 2022
Vulnerability Reserved
Aug 30, 2022

JSON

E-excellence Inc.