CVE-2025-2395criticalCWE-565

CVE-2025-2395: falha crítica em e-Excellence U-Office Force

e-Excellence U-Office Force - Improper Authentication

Publicada em

Seguir esta CVE+ Monitorar U-Office Force

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.8epss 0.6%
The U-Office Force from e-Excellence has an Improper Authentication vulnerability, allowing unauthenticated remote attackers to use a particular API and alter cookies to log in as an administrator.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
e-Excellence · U-Office Force
CVEs relacionadas — e-Excellence U-Office Force

No mesmo produto, das mais perigosas para as menos.

CVE-2023-32756HIGHe-Excellence U-Office Force - Path TraversalEPSS 1.2%CVE-2023-32757CRITICALe-Excellence U-Office Force - Arbitrary File UploadEPSS 0.9%CVE-2026-3422CRITICALe-Excellence｜U-Office Force - Insecure DeserializationEPSS 0.9%CVE-2025-2396HIGHe-Excellence U-Office Force - Arbitrary File UploadEPSS 0.7%CVE-2023-32755MEDIUMe-Excellence U-Office Force - Error Message LeakageEPSS 0.6%CVE-2025-12865HIGHe-Excellence｜U-Office Force - SQL InjectionEPSS 0.4%